213.248.75.197
Intelligence Briefing: 213.248.75.197/32
The IP address 213.248.75.197 is assigned to ASN 1299 (ARELION) under the organization se-twelve99-1-MNT within the 213.248.64.0/19 block in Sweden. Geolocation data places the address in the Europe/Stockholm timezone, and ownership records were established under the RIR registry Ripe.
Network reconnaissance indicated no open ports, with the service purpose identified as "Firewalled / No Services." DNS resolution confirmed the PTR hostname alloinfracomm-ic-373281.ip.twelve99-cust.net, and the domain twelve99-cust.net maintained SPF and DMARC authentication. Behavioral analysis recorded zero incidents, enumeration strikes, or WAF violations, and the address was not listed on known blacklists.
The IP maintained a risk score of 25, labeled Low Risk. While the threat actor classification identified the host as "Suspicious Host" with a tag of "suspicious," no specific campaigns or known attacker associations were linked. The immediate subnet (213.248.75.197/24) was classified as clean with an abuse density of 0 and no threat siblings. Data freshness confirmed observations between 2026-09-09 and 2026-09-24. The overall confidence level was Very Low, and the recommended action was to Monitor at low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | se-twelve99-1-MNT |
| ASN | AS1299 |
| Network Name | ARELION |
| CIDR Block | 213.248.64.0/19 |
| RIR | RIPE |
| Country | EU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | alloinfracomm-ic-373281.ip.twelve99-cust.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | alloinfracomm-ic-373281.ip.twelve99-cust.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 33% | 2 | 4 |
| Overall | 23% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-09 06:47:11 UTC |
| Last Seen | 2026-09-24 16:01:25 UTC |
| Profile Built | 2026-09-24 16:14:59 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 32 |
Full dossier details are available via our API.