65.21.197.246📋 Copy

IP Intelligence Briefing: 65.21.197.246

*Generated via IPDebrief Analysis*

---

**Core Profile**

• Risk Score: 25 (Low Risk)
• Provider: Hetzner Online GmbH (AS24940)
• Geolocation: Helsinki, Finland (FI)
• Network Role: CloudCompute Hosting (Hetzner)
• Services:

- Open ports: 80 (HTTP), 443 (HTTPS), 22 (SSH)

- HTTP server: `nginx/1.24.0`

- TLS certificate: Issued to `scamlist.duckdns.org` (Let’s Encrypt)

- DNS PTR: `static.246.197.21.65.clients.your-server.de`

---

**Threat Indicators**

• No known malicious activity: No indicators in threat feeds, no spam, or attacker associations.
• Certificate Anomaly: TLS certificate for `scamlist.duckdns.org` (potentially misconfigured or associated with suspicious domains).
• DNS Security: DNSSEC valid, CAA records present, but no DNSBL listings.

---

**Observation History**

• Recent Activity (June 11, 2026):

- Low confidence signals (0.60) with minimal data.

- No persistent threats or ownership changes detected.

• Historical Data: Sparse observations, primarily low-risk network and service metadata.

---

**Relationships**

• Network: Linked to `DE-HETZNER-20010926` (Hetzner’s network).
• DNS: Associated with `your-server.de` (PTR record).
• No external threat connections: No linked malicious campaigns or IPs.

---

**Neighborhood Analysis**

• Subnet: `65.21.197.246/24`
• Abuse Density: 0% (clean subnet)
• Neighbors: No active or risky sibling IPs detected.

---

**Recommendations**

1. Investigate Certificate: Verify the purpose of the `scamlist.duckdns.org` certificate. Ensure it’s not misconfigured or used for phishing.

2. Monitor DNS: Check if `your-server.de` is linked to any malicious domains or services.

3. No Immediate Action: Low-risk IP with no active threats, but maintain monitoring for anomalies.

---

*End of Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.