83.191.181.23
IP Intelligence Briefing: 83.191.181.23/32
Date: 2026-06-08
---
**1. Core Profile**
- Risk Score: 80 (High Risk)
- Ownership:
- ISP: Tele2 Sverige AB (AS1257)
- Country: Sweden (SE)
- Region: Stockholm Area
- Geolocation:
- City: London, GB (geo-plausibility: false)
- Mobile Carrier: Tele2 (LTE/5G)
- Coordinates: 59.3974°N, 13.5055°E
- Network Role: Mobile Carrier (no public services, firewalled)
---
**2. Threat Observations**
- Historical Activity (Last 30 Days):
- 18 Observations: 14 linked to Tele2 infrastructure, 4 flagged for suspicious activity (e.g., "pulse_count" > 40).
- Threat Indicators:
- No direct malware/C2 associations.
- DNS resolution to `c83-191-181-23.bredband.tele2.se` (valid, SPF/DMArc configured).
- BGP prefix `83.176.0.0/12` shows stable routing with no recent anomalies.
---
**3. Relationships & Network Context**
- DNS Associations:
- Primary hostname: `c83-191-181-23.bredband.tele2.se` (Tele2 Sweden).
- Network Subnet:
- /24 Subnet: `83.191.181.0/24` (no active neighbors detected).
- Abuse Density: 0% (clean subnet).
- Shared Infrastructure:
- Linked to Tele2 broadband network (`SE-TELE2-BROADBAND`).
---
**4. Security Posture**
- DNSSEC: Validated.
- Email Security: SPF/DMArc records present.
- Routing Stability: BGP prefix stable with no recent route changes.
- Threat Correlation: No direct malicious campaigns or C2 domains.
---
**5. SOC Actions**
- Monitor: Track DNS resolution and BGP updates for anomalies.
- Verify: Confirm geolocation discrepancies (London vs. Sweden).
- Secure: Ensure SPF/DMArc alignment for `tele2.se` domains.
- Isolate: No immediate mitigation needed for this IP, but monitor subnet activity.
Conclusion: This IP is part of Tele2’s mobile network with no active malicious indicators. Historical data suggests routine infrastructure use, but its geolocation mismatch and sparse subnet activity warrant further investigation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Swipnet Staff |
| ASN | AS1257 |
| Network Name | — |
| CIDR Block | — |
| RIR | RIPE |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | c83-191-181-23.bredband.tele2.se |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | c83-191-181-23.bredband.tele2.se |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 2 | 2 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 17% | 1 | 1 |
| Overall | 17% | 8 | 9 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Fresh
| First Seen | 2026-05-19 09:38:10 UTC |
| Last Seen | 2026-06-26 18:11:38 UTC |
| Profile Built | 2026-06-09 05:54:03 UTC |
| Data Freshness | Fresh |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.