82.118.29.97 is an IPv4 address operated by Internet Utilities Abuse Contact (AS206092), geolocated to Stockholm, Sweden. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP INTELLIGENCE BRIEFING
Target IP: 82.118.29.97/32
Date of Analysis: 2026-07-27
Classification: Low Risk / Defensive Interest Only
---
## EXECUTIVE SUMMARY
IP 82.118.29.97 is classified as a low-risk address with no active threat indicators. The IP is associated with RIPE NCC infrastructure in Stockholm, Sweden, and shows no evidence of malicious activity, abuse patterns, or compromised behavior. No immediate blocking or firewall actions are recommended.
---
## OWNERSHIP AND GEOLOCATION
- ASN: 206092
- Organization: Internet Utilities Abuse Contact
- Netname: IPXO-MNT
- CIDR Block: 82.118.29.0/24
- RIR: RIPE
- Country: Sweden (SE)
- Region: Stockholm County
- City: Stockholm
- Timezone: Europe/Stockholm
---
## NETWORK PROFILE
- Network Role: Firewalled / No Services
- Open Ports: None detected
- HTTP/TLS Services: No services detected
- PTR Records: None
- Forward DNS Resolution: Failed
- Reverse DNS: Not configured
---
## THREAT INDICATORS
- Risk Score: 0
- Abuse Confidence Score: N/A
- Blacklist Count: 0
- Known Attacker: False
- Tor Exit Node: False
- Spam Source: False
- Known Campaigns: None
- Threat Feeds: No matches
- DNSBL Listings: 0
---
## NEIGHBORHOOD ANALYSIS
- Subnet: 82.118.29.0/24
- Total Siblings: 100
- Abuse Density: 0
- High-Risk Neighbors: 0
- Medium-Risk Neighbors: 0
- Low-Risk Neighbors: 100
The /24 subnet demonstrates a benign profile with zero abuse density. Only two sibling IPs (82.118.29.8 and 82.118.29.13) show a riskScore of 25, both with authorityScore of 50, indicating standard operational monitoring rather than malicious activity.
---
## RELATIONSHIP GRAPH
- Direct Relationships: 1
- Network Association: IPXO-MNT
- Organizational Links: None beyond network-level association
- Hostname Associations: None
- Certificate Associations: None
---
## OBSERVATION HISTORY
- Total Observations: 11 signals collected
- Most Recent Signal: 2026-07-27T19:30:30+00:00
- Ownership Stability: 0 changes
- Threat Persistence: 0 days
- Signal Breakdown:
- RIR/Ownership: Confidence 0.90
- Geolocation: Confidence 0.95
- Operator Classification: Confidence 0.30 (Score: 0.1304 - Minimal)
- Overall Profile: Confidence 0.17 (Data sufficiency: 0.67)
The IP has demonstrated stable ownership attributes with no adverse changes over the observation period.
---
## TECHNICAL METRICS
- Traceroute Hops: 13
- First Hop RTT: 0.2ms
- Last Hop RTT: 132.4ms
- Timed Out Hops: 3
- Transit Networks: Comcast (identified)
- Route Stability: False
- BGP Prefix: 82.118.29.0/24
- Origin ASN: 206092
- RPKI State: Not validated
---
## SECURITY ACTIONS RECOMMENDATION
Action: NO ACTION REQUIRED
- Firewall Rules: None generated
- WAF Rules: None generated
- Threat Mitigation: Not applicable
- Monitoring Level: Standard
The IP address poses no observable threat. No iptables, nftables, nginx, pfSense, Cloudflare WAF, or AWS WAF rules are recommended.
---
## INTELLIGENCE CONCLUSION
IP 82.118.29.97 represents a benign infrastructure endpoint in Stockholm, Sweden. The address is properly registered under RIPE NCC governance and shows no indicators of compromise, abuse, or malicious behavior. The subnet maintains a clean security profile with zero abuse density. Standard defensive monitoring is sufficient; no additional security measures or traffic filtering are warranted.
---
Report Generated: 2026-07-27
Data Sources: IPDebrief Intelligence Platform
Classification: Defensive Intelligence / SOC Reference
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Internet Utilities Abuse Contact |
| ASN | AS206092 |
| Network Name | IPXO-MNT |
| CIDR Block | 82.118.29.0/24 |
| RIR | RIPE |
| Country | SE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS206092 |
| Network Prefix | 82.118.29.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 8% | 1 | 1 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 1 |
| geolocation | 23% | 2 | 2 |
| Overall | 12% | 8 | 9 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-14 21:59:12 UTC |
| Last Seen | 2026-10-08 03:07:33 UTC |
| Profile Built | 2026-10-07 00:40:46 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 18 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 82.118.29.97
Who owns the IP address 82.118.29.97?
82.118.29.97 is registered to Internet Utilities Abuse Contact. The address falls within the 82.118.29.0/24 network block. Registration is held at RIPE.
Where is 82.118.29.97 located?
Geolocation data places 82.118.29.97 in Stockholm, Stockholm County, Sweden. The local time zone is Europe/Stockholm. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 82.118.29.97 malicious or safe?
82.118.29.97 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.