65.21.62.219
IP Intelligence Briefing: 65.21.62.219
Date: 2026-06-12
---
**1. Core Profile**
- Risk Rating: Low Risk (Risk Score: 25 / 100)
- Ownership:
- ISP: Hetzner Online GmbH (ASN: 24940)
- Network: CLOUD-HEL1 (arin-registrar)
- Geolocation: Finland (Helsinki), Latitude/Longitude: Unavailable
- Network Role: Cloud Compute Hosting (Web Server, SSH, HTTP/HTTPS services)
- Threat Indicators: No malicious activity detected (no blacklists, spam, or known attacker associations).
---
**2. Network & Services**
- Open Ports:
- TCP 80 (HTTP), 443 (HTTPS), 22 (SSH)
- SSH Banner: `SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16`
- TLS Certificate:
- Issuer: Let’s Encrypt (CN=R12)
- Subject: `lesetoileskea.com` (SANs include subdomains)
- DNS:
- PTR Hostname: `server3.ggroupint.org`
- SPF/DKIM: Validated (SPF: true, DMARC: true)
- Hosting:
- Apache server banner detected
- No suspicious HTTP headers or content
---
**3. Observation History (30-Day Trend)**
- Stability: Stable (no significant changes in risk signals)
- Key Signals:
- DNSSEC and CAA records validated
- BGP route stability (no recent disruptions)
- No spam, phishing, or malware associations
- Abuse Density: 0% (clean subnet).
---
**4. Relationships & Neighbors**
- Related Entities:
- Linked to `ggroupint.org` (DNS hostname)
- Same network: `CLOUD-HEL1` (Hetzner cloud infrastructure)
- Subnet Neighbors:
- 65.21.62.42 (Risk Score: 25, Authority Score: 60)
- Subnet Abuse Density: 0% (mostly clean)
---
**5. Recommendations**
- Monitoring: Track for unexpected port openings or DNS changes.
- Firewall: No immediate blocking required.
- Context: Legitimate cloud server hosting a website with valid SSL/TLS. No signs of compromise.
Conclusion: 65.21.62.219 is a benign cloud-hosted server with no malicious indicators. Monitor for unusual behavior but no action required at this time.
---
*Generated by IPDebrief | Threat Intelligence for SOC Analysts*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Hetzner Online GmbH - Contact Role |
| ASN | AS24940 |
| Network Name | CLOUD-HEL1 |
| CIDR Block | 65.21.48.0/20 |
| RIR | ARIN |
| Country | FI |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | server3.ggroupint.org |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | server3.ggroupint.org |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/2 domains |
| DMARC | 1/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Apache |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16 |
🔐 TLS Certificate
CN=lesetoileskea.com was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | admin.lesetoileskea.comlesetoileskea.commail.lesetoileskea.comwebmail.lesetoileskea.comwww.lesetoileskea.com |
| Valid From | 2025-08-22T16:42:59+00:00 |
| Valid Until | 2025-11-20T16:42:58+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 05653723E118F0A582FFCC873D3397832186 |
| Thumbprint | 2E54F3B8FC8027AC2D1BD5429C027821EC6A08D9 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-30 23:05:04 UTC |
| Last Seen | 2026-06-29 08:10:33 UTC |
| Profile Built | 2026-06-29 08:17:49 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 26 |
Full dossier details are available via our API.