217.211.208.125📋 Copy

IP Intelligence Briefing: 217.211.208.125

Date: 2026-06-08

---

**1. IP Profile**

• Risk Score: 80 (High Risk)
• Ownership:

- ASN: 3301 (TELIANET-LIR)

- Organization: Telia Company AB (Sweden)

- Geolocation:

- Country: United States (Newark, NJ)

- Mobile Carrier: Telia (Sweden)

• Network Role: Mobile Carrier (LTE/5G)
• Threat Indicators:

- No malicious activity detected (no indicators, blacklists, or campaigns).

- DNS: PTR record resolves to `217-211-208-125-no2550.tbcn.telia.com` (Telia domain).

- Services: No open ports or TLS certificates detected.

---

**2. Observation History**

• Recent Activity (Last 30 Days):

- BGP Prefix: 217.208.0.0/13 (Telia Sweden)

- Geolocation: Confirmed as Sweden (Gävleborg County) via MaxMind, but geolocation validation marked as not plausible (possible routing anomalies).

- Traceroute: Successfully reached the target with 21 hops.

- DNSSEC: Validated as secure.

- Abuse Confidence: No abuse reports detected.

---

**3. Relationships**

• DNS Associations:

- Linked to `217-211-208-125-no2550.tbcn.telia.com` (Telia subdomain).

• Network Affiliation:

- Part of TELIANET (Telia Sweden) network.

• No Known Campaigns or Threat Feeds:

- No correlation with malicious clusters or known attacker IPs.

---

**4. Neighborhood Analysis**

• Subnet: 217.211.208.125/24
• Neighbor Data:

- No active neighbors detected in the subnet.

- Abuse Density: 0% (low risk of subnet-wide malicious activity).

---

**5. SOC Recommendations**

• Monitor for Anomalies:

- Investigate the geolocation inconsistency (US vs. Sweden). This could indicate routing anomalies or misconfigured mobile carrier IP ranges.

• Verify DNSSEC and BGP Validity:

- Confirm Telia’s BGP prefix and DNSSEC validation to ensure no spoofing or hijacking.

• Check for Unusual Traffic Patterns:

- Since the IP is mobile carrier-grade, monitor for unexpected data volumes or connections to high-risk domains.

• No Immediate Blocking Required:

- No malicious indicators detected. However, the high risk score suggests further investigation into network configuration or potential misattribution.

---

Conclusion: This IP is registered to Telia Sweden but geolocated in the US, with no direct malicious activity detected. The high risk score may stem from network configuration or routing anomalies. SOC teams should validate geolocation data and monitor for unexpected traffic patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.