95.216.13.46📋 Copy

# IP Intelligence Briefing: 95.216.13.46/32

## Executive Summary

IP 95.216.13.46 is classified as Low Risk with a risk score of 25. The address is hosted on Hetzner Online GmbH infrastructure in Helsinki, Finland, and is associated with the omnicar.eu domain. No active threat indicators were detected, and the IP shows stable ownership characteristics.

## Ownership and Infrastructure

• ASN: 24940 (Hetzner Online GmbH)
• Network: HETZNER-hel1-dc2 (95.216.13.0/26)
• Location: Helsinki, Finland (60.17°N, 24.93°E)
• Infrastructure Type: Cloud Compute / Hosting
• Registration: RIR: RIPE

## Network Services

The IP exposes standard web services:

• Port 80/tcp: HTTP
• Port 443/tcp: HTTPS
• Port 8443/tcp: HTTPS-ALT
• Server Banner: nginx
• TLS: TLS 1.2 cipher suite in use

## DNS Resolution

• PTR Hostname: omnicar.eu
• Forward Resolution: Confirmed
• Associated Domain: omnicar.eu
• Email Auth: SPF and DMARC records present

## Threat Assessment

Risk Score: 25 (Low)

Abuse Confidence Score: Not applicable

Blacklist Status: 0 lists

Campaign Association: None detected

The IP does not exhibit characteristics of malicious infrastructure:

• Not a Tor exit node
• Not a known attacker
• Not a spam source
• No persistent malicious behavior observed

## Relationship Analysis

The IP maintains associations with:

• Network: HETZNER-hel1-dc2
• Hostnames: omnicar.eu (DNS association)

## Neighborhood Assessment

Subnet: 95.216.13.46/24

• Abuse Density: 0%
• Threat Siblings: 0
• Active Siblings: 0

The /24 neighborhood shows no elevated abuse activity, indicating the IP is not part of a compromised subnet.

## Observation History

Seventeen signal observations recorded. Recent data indicates:

• Geolocation signals consistently point to Finland
• TLS scanning data captured with nginx server
• No ownership changes detected
• Threat persistence: None

## Recommended Actions

No specific firewall rules or blocking recommendations are generated at this time. The IP's low-risk profile and lack of threat indicators suggest it does not require immediate defensive measures.

SOC Analyst Note: This IP represents standard cloud-hosted infrastructure from a legitimate provider (Hetzner). Monitor for any behavioral changes, but no immediate blocking or investigation is warranted based on current intelligence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.