# IP Intelligence Briefing: 95.216.212.23/32
## Executive Summary
IP address 95.216.212.23 is classified as Low Risk with a risk score of 15. The address operates within Hetzner Online GmbH's cloud hosting infrastructure (CLOUD-HEL1) in Helsinki, Finland. No active threat indicators were detected across multiple threat feeds and reputation sources.
## Infrastructure Profile
| Attribute | Value |
|---|---|
| **Organization** | Hetzner Online GmbH - Contact Role |
| **ASN** | 24940 |
| **CIDR Block** | 95.216.208.0/20 |
| **Geolocation** | Helsinki, Finland (60.17°N, 24.93°E) |
| **Infrastructure Type** | CloudCompute |
| **Hosting Status** | Yes |
| **DNS Reverse** | static.23.212.216.95.clients.your-server.de |
| **Email Auth** | SPF: Yes, DMARC: Yes |
## Risk Assessment
- Risk Score: 15 (Low)
- Abuse Confidence: Not applicable
- Known Campaigns: None
- Blacklist Presence: 1 DNSBL listing out of 8 total lists
- Threat Indicators: Empty
- Tor Exit/Proxy: No
- Known Attacker: No
- Spam Source: No
## Behavioral History
Observation history contains 15 signals collected, most recently on 2026-08-13. Key findings:
- No ownership changes detected
- No threat persistence observed
- Not persistently malicious
- Geographic validation plausible (1411km distance from probe origin)
- RTT metrics stable (avg: 128ms, min: 123ms, max: 132ms)
## Network Context
- Same Subnet (95.216.212.23/24): No neighboring IPs detected
- Abuse Density: 0 (no high-risk activity in subnet)
- Relationships: DNS associations to hostname static.23.212.216.95.clients.your-server.de; same network associations to CLOUD-HEL1
- Control Plane: Route stable, RPKI state not available
## Recommended Actions
No specific firewall or blocking recommendations generated. The low-risk profile combined with cloud hosting infrastructure suggests this IP is likely part of legitimate service operations.
## Analyst Notes
This IP represents standard cloud hosting infrastructure operated by Hetzner Online GmbH. The absence of threat indicators, combined with proper email authentication (SPF/DMARC), supports benign operational status. No immediate action required unless contextual intelligence suggests otherwise.
---
*Intel Brief generated: 2026-08-13 | Classification: Defensive Operations*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-HEL1 |
| CIDR Block | 95.216.208.0/20 |
| RIR | RIPE |
| Country | FI |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.23.212.216.95.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.23.212.216.95.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 4/4 domains |
| DMARC | 2/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.28.3 (Ubuntu) |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.5 |
๐ TLS Certificate
| SANs | www.zuglotse.comzuglotse.com |
| Valid From | 2026-08-08T08:05:52+00:00 |
| Valid Until | 2026-11-06T08:05:51+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 05A21249AAB78BF837CC59F5ECE6E9F09B34 |
| Thumbprint | A7801D67D717BDE844BE9ABD925FE20D93007826 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 31% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-07 01:05:14 UTC |
| Last Seen | 2026-08-30 14:47:41 UTC |
| Profile Built | 2026-08-30 15:00:15 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 32 |
Full dossier details are available via our API.