85.19.121.224
IP address 85.19.121.224/32 was classified as Low Risk with a risk score of 25. The address was owned by AS25400 (TELE1-NO-MNT / NO-TELIA-MANAGEMENT) within the RIPE region and geolocated to Oslo, Norway, though geo sources exhibited a contradiction between NO and CZ. The endpoint was firewalled with no open ports or active services, and no TLS certificates or HTTP titles were observed. DNS records resolved to be8.no-osl-hmg-cr1.link.no.telia.net, maintaining SPF and DMARC configurations. No blacklist hits were recorded, and no known attack campaigns were associated with the address. While the threat actor classification tagged the host as "Suspicious Host," behavioral analysis showed zero honeypot hits or enumeration strikes. The neighborhood classification remained clean with no threat siblings detected. Analysts recommended monitoring the address due to signal contradictions regarding geolocation and routing stability, despite the low immediate severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | TELE1-NO-MNT |
| ASN | AS25400 |
| Network Name | NO-TELIA-MANAGEMENT |
| CIDR Block | 85.19.120.0/21 |
| RIR | RIPE |
| Country | NO |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | be8.no-osl-hmg-cr1.link.no.telia.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | be8.no-osl-hmg-cr1.link.no.telia.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 08:57:47 UTC |
| Last Seen | 2026-09-18 15:53:17 UTC |
| Profile Built | 2026-09-18 16:13:11 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 28 |
Full dossier details are available via our API.