82.118.29.67📋 Copy

IPDEBRIEF INTELLIGENCE BRIEFING

Target: 82.118.29.67/32

Date: 2026-07-27

Classification: LOW RISK / MINIMAL THREAT

---

EXECUTIVE SUMMARY

IP address 82.118.29.67 is classified as Low Risk with a risk score of 0. The IP is geolocated to Stockholm, Sweden (SE) under ASN 206092 (Internet Utilities Abuse Contact / IPXO-MNT). No active services are detected on the host, and it is currently firewalled with no open ports. The subnet exhibits minimal abuse density (0.0329) with 152 total sibling IPs, of which only 5 are flagged as threats.

---

RISK PROFILE

• Risk Score: 0 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Abuse Confidence: None
• Blacklist Status: Clean (0 blacklists)
• Campaign Indicators: None detected

---

NETWORK CLASSIFICATION

• ASN: 206092
• Organization: Internet Utilities Abuse Contact
• Netname: IPXO-MNT
• RIR: RIPE
• CIDR: 82.118.29.0/24
• Network Role: Firewalled / No Services
• Infrastructure Type: None (not CDN, Cloud, VPN, Proxy, or Hosting)
• Control Plane: Route stability flagged as unstable (0 route changes in 30 days); Operator score 0.1304 (Minimal)

---

THREAT INDICATORS

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Tor/VPN/Proxy: Negative
• DNS Reputation: No mail authentication (SPF/DMARC)
• Reverse DNS: None
• Threat Feeds: 0 active indicators

---

SUBNET ANALYSIS (82.118.29.0/24)

• Total Siblings: 152
• Active Siblings: 27
• Threat Siblings: 5
• Abuse Density: 0.0329 (Clean)
• Risk Distribution: 100 low-risk neighbors, 0 medium, 0 high
• Notable High-Risk Neighbors: 82.118.29.8 (risk 25), 82.118.29.13 (risk 25)

---

OBSERVATION HISTORY

17 observations recorded. Most recent activity (2026-07-27) shows:

• Port scanning activity with 0 open services
• Network classification signals
• Subnet analysis confirming clean status
• Alienvault OTX reputation signals (41 pulses, has_threats: true for subnet context)

No evidence of persistent malicious behavior or ownership changes.

---

RELATIONSHIPS

5 relationships identified, all pointing to "IPXO-MNT" network entity. No associations to known threat actors, campaigns, or malicious infrastructure.

---

RECOMMENDED ACTIONS

Based on current risk assessment, no blocking is required. Recommended actions:

• Firewall: Monitor pass (no immediate threat)
• Intrusion Detection: No rules needed
• SIEM: No correlation rules required
• Reputation Monitoring: Continue passive observation

---

INTELLIGENCE GAP

No significant relationships to known threat campaigns or malicious entities. Subnet shows minimal abuse density. Treat as benign infrastructure with standard monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.