82.118.29.246 is an IPv4 address operated by Internet Utilities Abuse Contact (AS206092), geolocated to Stockholm, Sweden. As of September 10, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# THREAT INTELLIGENCE BRIEFING
Target IP: 82.118.29.246/32
Classification: Low Risk / Clean
Generated: 2026-07-24
Analysis Scope: Full profile, observation history, relationships, and neighborhood analysis
---
## EXECUTIVE SUMMARY
IP address 82.118.29.246 is classified as Low Risk with an overall risk score of 25. The IP is assigned to ASN 206092 under the "Internet Utilities Abuse Contact" organization within RIPE RIR. No active threat indicators, known campaigns, or malicious reputation sources have been identified. The IP shows no open services, no DNS resolution, and no associated blacklists.
---
## OWNERSHIP & NETWORK CLASSIFICATION
| Attribute | Value |
|---|---|
| **ASN** | 206092 |
| **Organization** | Internet Utilities Abuse Contact |
| **Network** | IPXO-MNT |
| **CIDR Block** | 82.118.29.0/24 |
| **RIR** | RIPE |
| **Country** | Sweden (SE) |
| **City** | Stockholm |
| **Region** | Stockholm County |
The IP is registered under RIPE and the network classification indicates it is not a provider, CDN, VPN, proxy, hosting, or mobile infrastructure.
---
## THREAT INDICATORS
| Indicator | Status |
|---|---|
| **Known Attacker** | No |
| **Tor Exit Node** | No |
| **Spam Source** | No |
| **Blacklist Count** | 0 |
| **DNSBL Listed** | 1 of 8 lists |
| **Threat Feeds** | Empty |
| **Known Campaigns** | None |
| **Abuse Confidence Score** | Not assigned |
Assessment: No active threat indicators detected. The single DNSBL listing requires context-specific evaluation but does not indicate a confirmed malicious IP.
---
## NEIGHBORHOOD ANALYSIS (82.118.29.0/24)
| Metric | Value |
|---|---|
| **Subnet Classification** | Clean |
| **Abuse Density** | 0.0329 (Low) |
| **Total Siblings** | 152 |
| **Active Siblings** | 8 |
| **Threat Siblings** | 5 |
| **Risk Distribution** | 100 Low, 0 Medium, 0 High |
The /24 subnet demonstrates minimal abuse activity. The target IP shares the network with 152 sibling addresses; 5 show threat indicators and 8 are actively observed. This suggests the IP is part of a legitimate, low-abuse infrastructure.
---
## OBSERVATION HISTORY
Fourteen signal observations recorded as of 2026-07-24. Key findings:
- Geolocation: Consistent signals pointing to Stockholm, Sweden with multi-signal inference confidence of 0.52–0.85
- Ownership: RIPE registry signals confirming ownership under "Internet Utilities Abuse Contact"
- Abuse Density: Stable classification as "clean" with inherited risk level of 1
- Threat Persistence: Zero days observed; not persistently malicious
Temporal Assessment: No significant changes in geolocation, ownership, or threat profile. The IP demonstrates stable behavior with no escalation patterns.
---
## NETWORK SERVICES & DNS
| Category | Status |
|---|---|
| **Open Ports** | None detected |
| **TLS Certificates** | None |
| **DNS PTR Records** | None |
| **Forward Resolution** | Not resolved |
| **Hosted Domains** | None |
| **Email Auth (SPF/DMARC)** | N/A |
The IP is firewalled with no open services and no DNS activity, which is consistent with a static or low-usage address.
---
## CONTROL PLANE DATA
- Route Stability: False (route changes observed in last 30 days: 0)
- Operator Score: 0.1304 (Minimal)
- RPKI State: Not assessed
- IRR Consistency: Not assessed
- DNSSEC Valid: True
- BGP Prefix: 82.118.29.0/24
---
## RECOMMENDED ACTIONS
Based on the risk profile and threat indicators, the following actions are recommended:
| Action | Priority | Rationale |
|---|---|---|
| **Allow Traffic** | Low | IP classified as Low Risk with no active threats |
| **Monitor DNSBL Listing** | Medium | Single DNSBL listing requires contextual evaluation |
| **Standard Logging** | Low | No anomalous behavior detected |
| **No Blocking Required** | N/A | No firewall rules generated |
Note: The recommendations are probabilistic and should be combined with other security signals before taking action.
---
## FINAL ASSESSMENT
IP address 82.118.29.246 is a clean, low-risk address associated with legitimate Swedish infrastructure. No threat indicators, campaigns, or malicious reputation sources have been identified. The IP demonstrates stable ownership and geolocation with minimal neighborhood abuse activity.
Recommendation: Treat as benign. Standard network logging and monitoring apply. No blocking or mitigation actions required at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Internet Utilities Abuse Contact |
| ASN | AS206092 |
| Network Name | IPXO-MNT |
| CIDR Block | 82.118.29.0/24 |
| RIR | RIPE |
| Country | SE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS206092 |
| Network Prefix | 82.118.29.0/24 |
| Route mapping | Found |
| RPKI Status | Valid |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 44% | 2 | 5 |
| routing | 60% | 4 | 5 |
| services | 23% | 2 | 2 |
| ownership | 28% | 3 | 4 |
| reputation | 11% | 1 | 2 |
| geolocation | 28% | 2 | 3 |
| Overall | 32% | 14 | 21 |
| Data Coherence | Mostly Consistent (82%) — 1 contradiction(s) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-07 12:36:01 UTC |
| Last Seen | 2026-10-06 10:37:22 UTC |
| Profile Built | 2026-09-10 12:22:25 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 31 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 82.118.29.246
Who owns the IP address 82.118.29.246?
82.118.29.246 is registered to Internet Utilities Abuse Contact. The address falls within the 82.118.29.0/24 network block. Registration is held at RIPE.
Where is 82.118.29.246 located?
Geolocation data places 82.118.29.246 in Stockholm, Stockholm County, Sweden. The local time zone is Europe/Stockholm. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 82.118.29.246 malicious or safe?
82.118.29.246 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.