95.217.202.240📋 Copy

# IP Intelligence Briefing: 95.217.202.240

## Executive Summary

IP 95.217.202.240 is a Hetzner cloud compute endpoint associated with your-server.de hosting infrastructure. Risk score of 40 (Moderate) driven by RDP exposure and DNSBL listings. No active threat indicators, no known malicious activity, and clean subnet profile.

## Infrastructure Profile

## Threat Indicators

• Blacklist Status: Listed on 2 of 8 DNSBLs
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Campaigns: None detected
• Abuse Confidence Score: Not assessed

## Open Services

RDP exposure is the primary risk driver. No web services (HTTP/HTTPS) detected.

## Neighborhood Assessment

• Subnet: 95.217.202.0/24
• Abuse Density: 0%
• Threat Siblings: 0
• Classification: Clean
• Inherited Risk: None

No neighboring IPs flagged for abuse or malicious activity.

## Historical Observations

27 observations recorded. Recent activity (August 2026) shows consistent Hetzner hosting infrastructure with stable geolocation (Helsinki, FI) and no changes in provider or network registration. Routing stability flagged as unstable (2 route changes in 30 days).

## Recommended Actions

1. Monitor RDP Traffic: If this IP appears in logs as a source, investigate outbound connection attempts to port 3389.

2. DNSBL Review: Investigate specific DNSBL listings to determine if false positives or legitimate reasons (e.g., spam relay configuration).

3. Baseline Behavior: Establish normal traffic patterns for this hosting endpoint to identify anomalies.

## Conclusion

95.217.202.240 represents legitimate cloud hosting infrastructure with moderate risk due to exposed RDP service. No evidence of active compromise, botnet participation, or malicious activity. Subnet reputation is clean. Monitor for RDP scanning activity or policy violations related to DNSBL listings.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.