135.181.28.237📋 Copy

# IP Intelligence Briefing: 135.181.28.237/32

Classification: Low Risk / Legitimate Infrastructure

## Executive Summary

IP 135.181.28.237 is a low-risk cloud computing host operated by Hetzner Online GmbH in Helsinki, Finland. The address exhibits standard web hosting characteristics with no malicious indicators, threat associations, or suspicious network behavior observed across all intelligence sources.

## Profile Overview

• Risk Score: 30/100 (Low Risk)
• Organization: Hetzner Online GmbH - Contact Role
• ASN: 24940 (CLOUD-HEL1)
• Network Block: 135.181.24.0/21
• Geolocation: Helsinki, Uusimaa, Finland (FI)
• Infrastructure Type: Cloud Compute
• Reputation: Low Risk

## Network Services & Port Analysis

The IP hosts standard web services and administrative access:

• Port 80/tcp: HTTP (Web server)
• Port 443/tcp: HTTPS (Encrypted web traffic)
• Port 22/tcp: SSH (SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18)
• Port 8080/tcp: HTTP-Alt (Alternate HTTP service)

Server software: Caddy web server. DNS PTR resolution confirms: `static.237.28.181.135.clients.your-server.de`. Forward DNS resolution is confirmed with domain `your-server.de`.

## Threat Intelligence Findings

• Known Threat Indicators: None
• Blacklist Status: Clean (0 entries)
• Campaign Associations: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable

## Control Plane & Routing

• BGP Prefix: 135.181.0.0/16
• DNSSEC: Valid
• CAA Records: Present
• DNSBL Listed: 1 of 8 total lists
• Route Stability: False
• Operator Score: 0.3478 (Basic)

## Historical Analysis

Analysis of 18 observations indicates consistent low-risk behavior:

• Classification: Clean subnet
• Abuse Density: 0 (0% of /24 flagged as malicious)
• Threat Persistence: 0 days
• Observation Count: 0 persistent threats
• Recent Signals: Connection attempts to HTTPS, control plane validation checks

## Relationships & Network Context

• DNS Associations: static.237.28.181.135.clients.your-server.de
• Network Affiliation: CLOUD-HEL1 (Hetzner cloud network)
• Subnet Context: /24 block (135.181.28.0/24) shows 0 abuse density, clean classification, and 0 threat siblings among total siblings.

## Security Assessment

The IP address represents legitimate cloud infrastructure hosting web services. Standard security controls are in place (SPF, DMARC). No firewall blocking is recommended for this address under normal operational circumstances.

Recommended Action: Monitor as benign infrastructure. No immediate threat mitigation required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.