95.216.86.65📋 Copy

# IP INTELLIGENCE BRIEFING: 95.216.86.65/32

Classification: LOW RISK

Date: 2026-06-27

Analyst: IPDebrief Intelligence

## Executive Summary

IP address 95.216.86.65 presents a LOW RISK profile (Score: 25/100) with no active threat indicators. The address is hosted on Hetzner Cloud infrastructure and shows clean neighborhood characteristics with minimal abuse density.

## Network Infrastructure

• ASN: 24940 (Hetzner Networks)
• Organization: HOS-GUN
• Infrastructure Type: CloudCompute / Hosting
• Geolocation: Germany (DE) – Helsinki
• CIDR Block: 95.216.0.0/16
• Status: Cloud-hosted, firewalled environment

## Threat Assessment

• Risk Score: 25 (Low)
• Threat Indicators: None detected
• Blacklist Status: 0 blacklist entries
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Campaign Correlation: None

## Technical Observations

• DNS Resolution: static.65.86.216.95.clients.rack-oon.com
• Open Ports: None detected (service: Firewalled/No Services)
• Infrastructure Classification: Cloud hosting environment
• Mobile Carrier: No
• Residential: No

## Neighborhood Analysis (95.216.86.0/24)

• Abuse Density: 0 (Clean)
• Risk Distribution: 0 High, 0 Medium, 0 Low
• Active Siblings: 1
• Threat Siblings: 0
• Classification: Mostly Clean

## Historical Trend Analysis

• Observation Count: 24 signals tracked
• Recent Activity: Minimal threat scores observed
• Ownership Stability: Stable (0 changes)
• Threat Persistence: 0 days
• Trend: No escalation in risk profile

## Security Recommendations

Action: Monitor but no immediate blocking required

Rationale: Low-risk profile, clean infrastructure, no active threat indicators

Suggested Firewall Rules: None required at this time

WAF Configuration: Standard rules apply (no specific blocks needed)

## Intelligence Notes

The IP resolves to cloud hosting infrastructure under Hetzner's network. The absence of open ports and services suggests either a properly configured host or a dormant address. The geolocation data indicates European origin (DE), though the Helsinki coordinate may represent routing data rather than physical location. No correlation with known threat campaigns or malicious activity detected.

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.