# IP Intelligence Briefing: 95.217.148.161/32
## Executive Summary
IP 95.217.148.161 is a Hetzner cloud infrastructure endpoint located in Helsinki, Finland. Risk assessment indicates low threat profile with no active malicious indicators. The IP is classified as cloud computing hosting infrastructure with no open services detected.
## Profile Assessment
- Risk Score: 25 (Low Risk)
- Reputation: Low Risk
- Owner: Hetzner Online GmbH (ASN 24940)
- Network: 95.216.0.0/15, RIPE registry
- Geolocation: Helsinki, Finland (FI)
- Infrastructure Type: Cloud Compute, Hosting
## Threat Indicators
No threat indicators detected:
- Not a Tor exit node
- Not a known attacker
- Not a spam source
- No blacklist entries
- No known campaign associations
- Abuse Confidence Score: Not applicable
## Network Characteristics
- Services: None exposed (Firewalled / No Services)
- Open Ports: None detected
- DNS: Resolves to static.161.148.217.95.clients.your-server.de
- Email Auth: SPF and DMARC records present
- TLS: No certificates observed
- Control Plane: DNSSEC valid, CAA records present
- Routing: Route stable (95.217.0.0/16 prefix)
## Historical Observations
14 observations recorded over the monitoring period. Most recent activity observed on 2026-08-13. No escalating threat patterns detected. The IP shows consistent ownership and geolocation signals with no ownership changes or threat persistence indicators.
## Network Neighborhood
Subnet analysis of 95.217.148.0/24 shows zero neighboring IPs. Abuse density: 0. No correlated sibling IPs or threat siblings detected.
## Relationships
- DNS Association: static.161.148.217.95.clients.your-server.de (confirmed forward resolution)
- Network Association: DE-HETZNER-20090224 (Hetzner cloud infrastructure)
## Recommended Actions
No immediate blocking or mitigation actions required. The IP maintains a benign operational profile consistent with legitimate cloud hosting services.
---
*Report generated from IPDebrief intelligence data. Classification: Defensive Security Intelligence.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | DE-HETZNER-20090224 |
| CIDR Block | 95.216.0.0/15 |
| RIR | RIPE |
| Country | FI |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.161.148.217.95.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.161.148.217.95.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 3389 | rdp | tcp | โ |
| Closed Ports | 22, 25, 80, 443, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-12 12:22:24 UTC |
| Last Seen | 2026-08-27 09:33:19 UTC |
| Profile Built | 2026-08-29 17:08:41 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 23 |
Full dossier details are available via our API.