193.104.214.29
Intelligence Briefing: 193.104.214.29/32
Reputation assessment classified the IP as Moderate Risk with a score of 40. Ownership records linked the address to ASN 39889, Fredrik Holmqvist (SE-DCSNet-Services-NETWORK), within the Ripe RIR. Geolocation data mapped the endpoint to Sweden with a reported city of London and Stockholm timezone.
Network role classification identified the host as firewalled with no active open ports or TLS services. Behavioral monitoring recorded zero enumeration strikes, WAF violations, or honeypot hits, though the threat actor classification labeled it as suspicious. Campaign correlation likelihood was assessed as medium with nine correlated IPs.
Neighborhood analysis of the 193.104.214.0/24 subnet showed an abuse density of 0.4 and two threat siblings, while the subnet classification remained mostly clean. DNS hygiene was rated poor due to missing DMARC validation despite SPF presence.
Recommendations prioritized rate-limiting with medium severity. Suggested firewall rules included iptables, nginx, and pf configurations to mitigate traffic volume.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Fredrik Holmqvist |
| ASN | AS39889 |
| Network Name | SE-DCSNet-Services-NETWORK |
| CIDR Block | 193.104.214.0/24 |
| RIR | RIPE |
| Country | SE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | r2-100g-transit.noackhosting.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | r2-100g-transit.noackhosting.net |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 20% | 1 | 1 |
| services | 28% | 2 | 2 |
| ownership | 40% | 2 | 3 |
| reputation | 20% | 1 | 2 |
| geolocation | 40% | 2 | 3 |
| Overall | 31% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-21 16:25:12 UTC |
| Last Seen | 2026-09-22 21:33:10 UTC |
| Profile Built | 2026-09-22 21:43:10 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.