The IP address 213.248.89.13/32 maintained a Low Risk reputation with a risk score of 25. Infrastructure analysis confirmed ownership by ASN 1299 (ARELION) with geolocation consensus in Sweden. The host resolved to `spacex-ic-372407.ip.twelve99-cust.net` and remained firewalled with no open services.
Behavioral metrics showed zero honeypot hits, enumeration strikes, or WAF violations. Although the threat actor classification designated the host as "Suspicious," no specific campaigns were identified. The subnet (213.248.89.0/24) remained clean with zero abuse density.
Activity was observed between 2026-09-04 and 2026-09-27. Due to the clean neighborhood context and low severity, analysts recommended monitoring the address.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | se-twelve99-1-MNT |
| ASN | AS1299 |
| Network Name | ARELION |
| CIDR Block | 213.248.64.0/19 |
| RIR | RIPE |
| Country | EU |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | spacex-ic-372407.ip.twelve99-cust.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | spacex-ic-372407.ip.twelve99-cust.net |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 27% | 2 | 3 |
| services | 19% | 2 | 2 |
| ownership | 30% | 3 | 4 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 12 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-04 08:11:58 UTC |
| Last Seen | 2026-09-27 01:00:24 UTC |
| Profile Built | 2026-09-27 01:10:27 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 35 |
Full dossier details are available via our API.