2.71.240.121
# IP INTELLIGENCE BRIEFING
Target: 2.71.240.121/32
Date: 2026-07-27
Classification: Low Risk / Defensive Monitoring
---
## EXECUTIVE SUMMARY
IP 2.71.240.121 presents a low-risk profile (Risk Score: 25/100) with Swedish geolocation attribution. The address is assigned to Erik Blomberg's customer network (HI3G-CUSTOMER-NET, ASN 44034) under RIPE RIR. No active services, open ports, or known threat indicators were detected during scanning.
---
## PROFILE ASSESSMENT
Risk Indicators:
- Overall Risk Score: 25 (Low Risk)
- Abuse Confidence: Not elevated
- Known Attacker Status: Negative
- Spam Source Status: Negative
- Tor Exit Node: No
Geolocation:
- Country: Sweden (SE)
- City: Stockholm
- Coordinates: 59.3247° N, 18.056° E
- Geo Consensus: Validated across 2 sources
Network Attribution:
- ASN: 44034
- Organization: Erik Blomberg
- Netname: HI3G-CUSTOMER-NET
- CIDR Block: 2.68.0.0/14
- RIR: RIPE
---
## OBSERVATION HISTORY (18 Total Signals)
Recent activity analysis reveals mixed signal types:
- DNS Resolution: Resolved to 2.71.240.121.mobile.tre.se (tre.se domain)
- Geolocation: Stockholm, Sweden (confidence: 0.70)
- Blacklist Status: 1 listing out of 8 threat feeds (max severity: high)
- Ownership Tracking: No ownership changes detected
- Persistence: No persistent malicious behavior observed
Temporal analysis indicates threat_persistence_days: 0 with is_persistently_malicious: false.
---
## RELATIONSHIP MAPPING
Three relationships identified:
1. Network Association: HI3G-CUSTOMER-NET (2x relationship entries)
2. DNS Association: 2.71.240.121.mobile.tre.se
No certificate matches or campaign correlations detected.
---
## SUBNET ANALYSIS (2.71.240.121/24)
- Neighboring IPs: 0
- Abuse Density: 0%
- Risk Distribution: Even (0 high, 0 medium, 0 low risk neighbors)
- Threat Siblings: None detected
---
## NETWORK SERVICES
- Open Ports: None detected
- TLS Certificates: None
- HTTP Banner: None
- Service Classification: Firewalled / No Services
---
## CONTROL PLANE
- DNSSEC: Valid
- DNSBL Listings: 1/8 total lists
- BGP Prefix: 2.64.0.0/13
- Route Stability: False (isRouteStable)
- MoAS: No
---
## SOC RECOMMENDATIONS
Action Priority: LOW
Recommended Actions:
- Standard monitoring applied (risk score < 50)
- No immediate blocking required
- DNSBL listing warrants periodic review
Firewall Rules:
- No specific rules generated (low risk profile)
- Default allow policies acceptable for inbound connections
---
## CONCLUSION
2.71.240.121 represents a legitimate residential customer IP with minimal threat characteristics. The single DNSBL listing and firewalled service status suggest the address may be associated with a terminated or inactive endpoint. No actionable threat indicators warrant immediate defensive response.
Status: Clear for normal operation
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Erik Blomberg |
| ASN | AS44034 |
| Network Name | HI3G-CUSTOMER-NET |
| CIDR Block | 2.68.0.0/14 |
| RIR | RIPE |
| Country | SE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 2.71.240.121.mobile.tre.se |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 2.71.240.121.mobile.tre.se |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS44034 |
| Network Prefix | 2.64.0.0/13 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 5 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 14% | 1 | 3 |
| geolocation | 17% | 2 | 3 |
| Overall | 16% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 14:59:02 UTC |
| Last Seen | 2026-09-02 16:46:45 UTC |
| Profile Built | 2026-09-02 16:50:35 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 30 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 2.71.240.121
Who owns the IP address 2.71.240.121?
2.71.240.121 is registered to Erik Blomberg. The address falls within the 2.68.0.0/14 network block. Registration is held at RIPE.
Where is 2.71.240.121 located?
Geolocation data places 2.71.240.121 in Stockholm, 26, Sweden. The local time zone is Europe/Stockholm. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 2.71.240.121 malicious or safe?
2.71.240.121 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 2.71.240.121?
The reverse DNS (PTR) record for 2.71.240.121 is 2.71.240.121.mobile.tre.se. This hostname is forward-confirmed, meaning it resolves back to the same address.