212.241.4.238
# INTELLIGENCE BRIEFING: 212.241.4.238/32
Classification: Moderate Risk (Score: 55)
Analysis Date: 2026-07-28
## OWNERSHIP & INFRASTRUCTURE
The IP address 212.241.4.238 belongs to ASN 12997 (KTNET-MNT) under the network name KYRGYZTELECOM_ADSL_PPPOE. The subnet 212.241.4.0/24 is registered under RIPE registry. Geographic data indicates location in Stockholm, SE, though geolocation consensus shows conflicting data with Bishkek, KG references. The IP is classified as a PPPoE residential connection with no known hosting, CDN, or cloud infrastructure.
## NETWORK ROLE & CLASSIFICATION
Current network role: Firewalled / No Services
- Not a proxy, VPN, Tor exit, or residential hosting service
- No open ports detected via active scanning
- Not classified as bogon or anycast
## THREAT POSTURE
Risk assessment: Moderate Risk (55/100)
- Known attacker: No
- Spam source: No
- Tor exit node: No
- Known campaigns: None identified
- Blacklist status: 0 confirmed blacklists (3 DNSBL entries among 8 total lists)
- Threat indicators: None detected in current profile
## DNS & EMAIL REPUTATION
- PTR hostname: 212-241-4-238.pppoe.ktnet.kg
- Forward resolution: Unconfirmed (0.85 confidence)
- Email authentication: SPF record present, DMARC absent
- Forward resolution count: 1
## NEIGHBORHOOD ANALYSIS
Subnet 212.241.4.0/24 assessment:
- Overall classification: Clean
- Abuse density: 0 (low)
- Total siblings: 5
- Threat siblings: 0
Neighbor risk distribution (212.241.4.0/24):
- High risk: 0 IPs
- Medium risk: 1 IP (212.241.4.43, Score: 40)
- Low risk: 3 IPs (212.241.4.33, 212.241.4.169, 212.241.4.175)
## OBSERVATION HISTORY
19 historical observations recorded through 2026-07-28. Recent observations indicate:
- Persistent clean subnet classification
- Stable ownership with KTNET-MNT
- No observed ownership changes
- No threat persistence patterns detected
- Average threat observation count: 0
## CONTROL PLANE DATA
- BGP prefix: 212.241.0.0/20
- Route stability: Not stable (0 route changes in 30d)
- RPKI state: Not available
- DNSSEC validation: Valid
- Transit networks: Comcast
## RELATIONSHIPS
- Primary network association: KYRGYZTELECOM_ADSL_PPPOE (same network)
- DNS associations: 212-241-4-238.pppoe.ktnet.kg
- No certificate or organizational entity relationships detected
## RECOMMENDATIONS
Based on the moderate risk classification and lack of active threat indicators:
1. Monitor subnet 212.241.4.0/24 for changes in abuse density
2. Note one medium-risk neighbor (212.241.4.43) for continued observation
3. No immediate blocking required; maintain passive monitoring
4. Consider DMARC enforcement for associated domain ktnet.kg
Status: No immediate action required. IP classified as residential PPPoE with moderate risk profile but no active malicious indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | KTNET-MNT |
| ASN | AS12997 |
| Network Name | KYRGYZTELECOM_ADSL_PPPOE |
| CIDR Block | 212.241.4.0/24 |
| RIR | RIPE |
| Country | KG |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 212-241-4-238.pppoe.ktnet.kg |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 212-241-4-238.pppoe.ktnet.kg |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS12997 |
| Network Prefix | 212.241.0.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 12% | 2 | 2 |
| Overall | 13% | 9 | 12 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-17 05:00:37 UTC |
| Last Seen | 2026-09-02 15:15:15 UTC |
| Profile Built | 2026-09-02 15:26:11 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 27 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 212.241.4.238
Who owns the IP address 212.241.4.238?
212.241.4.238 is registered to KTNET-MNT. The address falls within the 212.241.4.0/24 network block. Registration is held at RIPE.
Where is 212.241.4.238 located?
Geolocation data places 212.241.4.238 in Stockholm, Bishkek, Sweden. The local time zone is Europe/Stockholm. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 212.241.4.238 malicious or safe?
212.241.4.238 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 212.241.4.238?
The reverse DNS (PTR) record for 212.241.4.238 is 212-241-4-238.pppoe.ktnet.kg. This hostname is not forward-confirmed, so it should be treated as a weak signal.