asn.dev

Autonomous system

AS24940 HETZNER-AS

Hosting RIPE

IPv4 addresses 3.17M 107 prefixes
IPv6 prefixes 5 counted as prefixes, not addresses
Countries 1 mostly DE
Flagged prefixes 16 see address space

Summary

Hetzner Online GmbH

Germany (Global) · AI-generated

hosting dedicated cloud

Hetzner is a German hosting provider popular for inexpensive dedicated servers,

cloud instances, and colocation, with data centers in Germany, Finland, and the

United States.

What it's used for

  • Budget-friendly dedicated and cloud servers used by developers, self-hosters, and small businesses.
  • General-purpose hosting — websites, game servers, build runners, VPNs, and hobby projects.

Notable

  • Because it is cheap and self-service, Hetzner space hosts a huge mix of legitimate projects alongside occasional abuse, so IPs here vary widely in reputation.
  • Hetzner publishes clear abuse-handling processes and acts on reports.

Interesting

  • Hetzner runs large solar-powered and energy-efficient data center campuses and competes largely on price-per-performance rather than managed services.

This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.

Address space

Summary

Full explorer
CountryNamePrefixes
DEGermany112

Registry

Allocation record

via RIPE RDAP
Registry
RIPE
Handle
AS24940
Registry name
HETZNER-AS
Registrant
HOS-GUN
Abuse contact
abuse@hetzner.com
Registered
2002-06-03
Last changed
2026-06-30
Status
active

Reputation

Classification and threat

Hosting Datacenter or cloud provider. Addresses are servers, not people.

4 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.

PrefixAdvisoryPublished
188.40.81.84"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21
49.12.133.165"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21
95.216.15.11"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21
95.216.15.25"First VPN Service" Used by Ransomware Actors to Compromise Systems2026-05-21

Threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.

Elsewhere

Cross-check