# IP Intelligence Briefing: 62.238.11.147/32
## Executive Summary
IP 62.238.11.147 is a low-risk (risk score: 15) cloud infrastructure endpoint operated by Hetzner Online GmbH. The address hosts a web server with standard HTTP/HTTPS services and SSH access. No active malicious campaigns, blacklisting, or threat indicators were detected. The IP maintains a stable operational profile within Hetzner's Helsinki (FI) cloud infrastructure.
## Network Identity & Ownership
- IP Address: 62.238.11.147
- ISP/Provider: Hetzner Online GmbH (ASN 24940)
- Organization: Hetzner Online GmbH - Contact Role
- Network Name: CLOUD-HEL1
- CIDR Block: 62.238.0.0/20
- RIR: RIPE
- Geolocation: Helsinki, Finland (Uusimaa region)
- Infrastructure Type: CloudCompute / Hosting Provider
## Network Role Classification
- Provider: Hetzner
- Infrastructure: Cloud server environment
- Hosting: Active
- CDN: No
- VPN/Proxy: No
- Tor Exit Node: No
## Open Services & Ports
| Port | Protocol | Service | Banner |
|---|---|---|---|
| 80 | TCP | HTTP | โ |
| 443 | TCP | HTTPS | โ |
| 22 | TCP | SSH | SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16 |
TLS Certificate: Not detected
Server Software: Caddy
## DNS Resolution
- Forward Resolution: static.147.11.238.62.clients.your-server.de
- PTR Record: static.147.11.238.62.clients.your-server.de
- Domain: your-server.de
- Forward Confirmed: Yes
- Email Authentication: SPF configured, DMARC configured
## Threat Assessment
- Risk Score: 15 (Low Risk)
- Blacklist Count: 0
- Abuse Confidence Score: None
- Known Campaigns: None detected
- Campaign Likelihood: None
- Threat Feeds: No matches
Control Plane Observations:
- DNSBL Listed: 1 of 8 total lists
- Operator Score: 0.3478 (Basic)
- DNSSEC Valid: Yes
- Route Stability: Unstable (isRouteStable: false)
- Route Changes (30d): 0
## Neighborhood Analysis
- Subnet: 62.238.11.147/24
- Abuse Density: 0 (Clean)
- Threat Siblings: 0
- Active Siblings: 0
- Classification: Clean
- Neighbor Count: 0
## Historical Observations
Total observations: 24 signals recorded
Recent Activity:
- 2026-08-05: Banner, operator, and profile signals collected
- 2026-07-30: HTTPS connection attempt (failed), port scan detected, SSH banner confirmed
Temporal Indicators:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: No
## Relationships
- Network Associations: Multiple links to CLOUD-HEL1 network
- DNS Associations: static.147.11.238.62.clients.your-server.de
- Total Relationships: 13
## Security Actions & Recommendations
No immediate action required. The IP presents a low-risk profile typical of legitimate cloud hosting infrastructure. Standard monitoring practices applicable.
## Intelligence Narrative
IP 62.238.11.147 is a Hetzner-managed cloud endpoint in Helsinki, Finland, operating within the CLOUD-HEL1 network segment. The address hosts web services (HTTP/HTTPS) with SSH access enabled, consistent with typical cloud server deployments. DNS infrastructure includes SPF and DMARC records, indicating reasonable email security posture. The IP maintains a clean reputation with no blacklist associations and zero threat siblings in the /24 subnet. Historical observation data shows standard operational activity without escalation of malicious indicators. Control plane analysis reveals minor route instability but no anomalous routing behavior. The IP is classified as low risk and requires no immediate defensive measures beyond routine network monitoring.
---
Classification: LOW RISK
Last Updated: 2026-08-05
Data Sources: IPDebrief Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-HEL1 |
| CIDR Block | 62.238.0.0/20 |
| RIR | RIPE |
| Country | FI |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | static.147.11.238.62.clients.your-server.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | static.147.11.238.62.clients.your-server.de |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Caddy |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-26 15:21:01 UTC |
| Last Seen | 2026-08-12 20:48:21 UTC |
| Profile Built | 2026-08-12 21:01:19 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 28 |
Full dossier details are available via our API.