95.216.3.239📋 Copy

# IP Intelligence Briefing: 95.216.3.239/32

## Executive Summary

IP address 95.216.3.239 is a low-risk (Risk Score: 25) infrastructure endpoint operating within the Hetzner Online GmbH cloud infrastructure in Helsinki, Finland. The IP exhibits characteristics of legitimate cloud hosting with no active threat indicators, open services, or malicious behavioral patterns. No immediate blocking or mitigation actions are recommended.

## Ownership and Infrastructure

• ASN: 24940 (Hetzner Online GmbH)
• Network: 95.216.0.0/16
• Organization: Hetzner Online GmbH - Contact Role
• RIR: Ripe
• Infrastructure Type: CloudCompute / Hosting
• Geolocation: Helsinki, Finland (FI), 60.1719°N, 24.9347°E
• Geographic Validation: Plausible (1411km distance, avg RTT 129.2ms across 5 probes)

## Network Role and Services

• Provider: Hetzner
• Status: Cloud-computing infrastructure with hosting services
• Open Ports: None detected (firewalled/no services exposed)
• DNS Forward Resolution: mail.omnesmag.com
• PTR Record: static.239.3.216.95.clients.your-server.de
• DNSSEC: Valid

## Threat Assessment

• Reputation: Low Risk
• Threat Indicators: None
• Blacklist Status: Not listed on major blacklists
• DNSBL Listings: 1 out of 8 total checks
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Affiliation: None identified

## Historical Analysis

23 observations collected through 2026-06-28 indicate stable infrastructure behavior with consistent geolocation data and no escalation in threat signals. The IP demonstrates persistent ownership without malicious activity. Signal history shows:

• Stable geographic attribution to Helsinki
• Consistent network routing through Hetzner infrastructure
• No emergence of new threat indicators

## Relationship Intelligence

The IP maintains 45 documented relationships, primarily:

• DNS associations with your-server.de domain hostnames
• Network associations with Hetzner Helsinki datacenter (HETZNER-hel1-dc2)
• Standard hosting infrastructure connections

## Neighborhood Analysis (95.216.3.0/24)

• Abuse Density: Minimal
• Classification: Mostly clean
• Active Siblings: 1
• Threat Siblings: 1 (isolated, not indicative of coordinated activity)
• High-Risk Neighbors: 0

## Recommended Actions

No specific firewall rules or blocking recommendations are generated at this time. The IP exhibits normal cloud hosting behavior with no actionable threat indicators. Standard network policies apply.

## Intelligence Notes

The IP address represents legitimate cloud infrastructure from a major European hosting provider. The minimal DNSBL listing and single threat sibling within the /24 subnet suggest either temporary scanning activity or false positives. No correlation with known attack campaigns or coordinated malicious infrastructure has been identified.

Classification: LOW RISK - Routine monitoring advised

Last Updated: 2026-06-28

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.