IP Intelligence Briefing: 95.217.33.242
Date: 2026-06-08
---
**1. IP Profile**
- Risk Assessment:
- Overall Risk Score: 25 (Low Risk)
- Provider Score: 0 (No provider-specific threats)
- Authority Score: 0 (No authoritative malicious indicators)
- Stability: No stability score available.
- Ownership:
- AS: AS24940 (Hetzner Online GmbH)
- Organization: Hetzner Online GmbH (Contact Role)
- Geolocation: Helsinki, Finland (FI).
- Threat Indicators:
- No malicious indicators, spam, or known attacker associations.
- Not listed in DNSBLs or threat feeds.
- Network Role:
- Cloud Hosting: Yes (Hetzner CloudCompute infrastructure).
- Subnet: 95.217.0.0/16 (Hetzner network).
- Services: No open ports or TLS certificates detected.
---
**2. Observation History**
- Last 30 Days:
- No persistent malicious activity.
- DNS Resolution: Validated as "your-server.de" with SPF/DMArc.
- Traceroute:
- Location: Helsinki, Finland (1,411 km from probe).
- RTT: 397โ458 ms (avg: 435 ms).
- Geo-Plausibility: Confirmed.
- Network Stability: No route changes detected.
---
**3. Relationships**
- DNS Associations:
- Linked to `static.242.33.217.95.clients.your-server.de` (repeatedly).
- Network:
- Same subnet as DE-HETZNER-20090224 (Hetzner infrastructure).
- No Certificates or Hostnames: No TLS certificates or additional hostnames detected.
---
**4. Neighborhood Analysis**
- Subnet: 95.217.33.242/24.
- Abuse Density: 0% (clean subnet).
- Neighbors: No sibling IPs found in the subnet.
---
**5. Recommendations**
- Monitoring: Low risk, but monitor for unexpected DNS changes or new services.
- Firewall: No blocking required.
- Context: Likely a static IP for a Hetzner-hosted server with no malicious activity.
Conclusion: This IP is a legitimate Hetzner CloudCompute instance with no malicious indicators. No immediate defensive action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | RIPE |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.242.33.217.95.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.242.33.217.95.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 2 domains |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 8443 | https-alt | tcp | โ |
| Closed Ports | 22, 25, 3389, 8080 (3 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | focus-server4.gr |
| Valid From | 2026-06-02T07:31:38+00:00 |
| Valid Until | 2026-08-31T07:31:37+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 059BDD425C5F940C928872B466E471ED32C6 |
| Thumbprint | BD9F1D856F3A3018E31C783132BE2F70F6A6CA15 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 29% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 26% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-19 09:38:17 UTC |
| Last Seen | 2026-06-28 08:56:57 UTC |
| Profile Built | 2026-06-29 03:01:20 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 27 |
Full dossier details are available via our API.