62.115.139.125
Intelligence Briefing: IP 62.115.139.125/32
Overview
The IP address 62.115.139.125/32 was assigned a Low Risk reputation with a risk score of 25. Ownership records linked the address to ASN 1299 (se-twelve99-1-MNT) and the organization se-twelve99-1-MNT, registered under the Ripe registry within the 62.115.128.0/20 CIDR block.
Technical Status
Network analysis confirmed the host was firewalled with no open ports or active services detected. DNS resolution returned the PTR hostname kanc-b2-link.ip.twelve99.net, but forward confirmation remained unverified. The geolocation profile placed the infrastructure in Sweden (SE) with a timezone of Europe/Stockholm, despite conflicting city data.
Threat Assessment
Threat intelligence analysis indicated the presence of threat indicators, yet the host was not classified as a known attacker, spam source, or part of a known campaign. The ThreatActor type was labeled "Suspicious Host" with a severity rating of low. Observations recorded between September 3, 2026, and September 18, 2026, showed no persistent malicious behavior. The surrounding subnet (62.115.139.125/24) was classified as mostly_clean with an abuse density of 0.069 and two identified threat siblings.
Recommendation
Security teams are advised to monitor the address due to the presence of threat indicators, despite the low overall risk profile and consistent neighborhood classification.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | se-twelve99-1-MNT |
| ASN | AS1299 |
| Network Name | EU-ARELION-20130924 |
| CIDR Block | 62.115.128.0/20 |
| RIR | RIPE |
| Country | EU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | kanc-b2-link.ip.twelve99.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | kanc-b2-link.ip.twelve99.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 43% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 33% | 2 | 5 |
| Overall | 25% | 10 | 18 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-03 12:50:37 UTC |
| Last Seen | 2026-09-25 17:00:38 UTC |
| Profile Built | 2026-09-25 17:19:42 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 37 |
Full dossier details are available via our API.