Intelligence Briefing: 213.239.224.38
Entity Overview
The target IP address 213.239.224.38 was assigned to Hetzner Online GmbH (ASN 24940) under the registration DE-HETZNER-20030528. Geolocation data placed the infrastructure in Berlin, Germany. Network role analysis classified the address as a cloud compute instance within a hosting provider environment. No open ports or active services were detected.
Risk Assessment
The profile assigned a Low Risk reputation with a risk score of 25. While the threat actor type was classified as "Suspicious Host," the known attacker status remained false. The immediate subnet (213.239.224.38/24) was classified as clean with zero abuse density and zero threat siblings.
Threat Indicators
Observation history recorded between August 30, 2026, and September 6, 2026, showed one DNSBL listing out of eight total lists. No specific threat indicators, known campaigns, or honeypot hits were present. Behavioral metrics indicated zero incidents and no active attacker activity.
Recommendation
Analysts were advised to monitor the address at low severity. This recommendation was based on the clean neighborhood classification and the lack of confirmed malicious activity despite the suspicious host classification.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | DE-HETZNER-20030528 |
| CIDR Block | 213.239.192.0/18 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | core31.hel1.hetzner.com |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | core31.hel1.hetzner.com |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 27% | 2 | 3 |
| Overall | 25% | 10 | 21 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-30 02:37:24 UTC |
| Last Seen | 2026-09-27 11:20:02 UTC |
| Profile Built | 2026-09-27 11:29:50 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 38 |
Full dossier details are available via our API.