213.102.87.237📋 Copy

# Intelligence Briefing: 213.102.87.237/32

## Executive Summary

IP address 213.102.87.237 is a Tele2 Sweden residential broadband connection with moderate baseline risk (score: 50). The IP demonstrates no active malicious indicators, operates within a clean subnet, and shows stable ownership patterns. Recommended classification: Low Priority / Monitor.

## Network Profile

• ASN: 1257 (Tele2 IP Registry)
• Organization: Tele2 Sverige AB
• Location: Västerås, Västmanland County, Sweden
• Network Type: Residential Broadband (LTE/5G)
• CIDR: 213.102.64.0/19
• PTR Hostname: c213-102-87-237.bredband.tele2.se

## Risk Assessment

• Risk Score: 50 (Moderate - baseline score for residential/mobile connections)
• Abuse Confidence: None detected
• Blacklist Status: Clean (0 entries across 8 DNSBL checks)
• Known Campaigns: None
• Threat Feeds: No indicators

## Observation History (16 signals)

Recent observations confirm stable characteristics:

• Subnet Classification: Clean (abuse density: 0)
• Threat Persistence: None detected
• Ownership Changes: 0
• Geolocation: Consistent Sweden placement (Västerås, ~600km accuracy radius)
• Operator Score: 0.3478 (Basic)

## Network Neighborhood Analysis

• Subnet: 213.102.87.0/24
• Abuse Density: 0% (clean)
• Neighbor Count: 0
• Threat Siblings: 0
• Classification: Clean subnet with no inherited risk

## Network Relationships

• Primary Associations: SE-TELE2-BROADBAND network, tele2.se DNS infrastructure
• Certificate Associations: None
• Related Hostnames: c213-102-87-237.bredband.tele2.se

## Service Analysis

• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None
• Classification: Firewalled / No Services

## Recommended Actions

1. Classification: Residential broadband connection - standard teletraffic

2. Threat Level: Low (baseline risk for residential IP)

3. Action: Monitor for behavioral changes; no immediate mitigation required

4. Firewall Rules: Standard residential IP policies apply

5. Investigation Priority: Low unless correlated with other malicious activity

## Conclusion

This IP represents a legitimate Tele2 residential broadband connection with no evidence of malicious use. The moderate risk score reflects the IP's classification as a residential/mobile connection rather than malicious activity. No immediate action required; continue standard monitoring procedures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.