85.24.200.219
Intelligence briefing for IP 85.24.200.219. The asset was flagged as High Risk with a reputation score of 80. Geolocation data identified the IP as residing in Hudiksvall, Gävleborg County, Sweden, within the BAHNHOF-NCC network (ASN 8473). Scanning confirmed the host served HTTP on port 80 and SSH on port 22 using dropbear. DNS records resolved to h-85-24-200-219.A158.priv.bahnhof.se under the bahnhof.se domain, which utilized SPF and DMARC authentication. Although the reputation score indicated elevated risk, the address showed zero current blacklist hits and no association with known attack campaigns. Security teams should monitor traffic from this IP for anomalous activity consistent with its High Risk classification.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | BAHNHOF-NCC |
| ASN | AS8473 |
| Network Name | GENERAL-PRIVATE-NET-A328-145 |
| CIDR Block | 85.24.200.0/23 |
| RIR | RIPE |
| Country | SE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | h-85-24-200-219.A158.priv.bahnhof.se |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | h-85-24-200-219.A158.priv.bahnhof.se |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Multi-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 443, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8473 |
| Network Prefix | 85.24.128.0/17 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 34% | 2 | 5 |
| ownership | 17% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 17% | 2 | 3 |
| Overall | 21% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-14 03:40:43 UTC |
| Last Seen | 2026-09-29 20:37:57 UTC |
| Profile Built | 2026-09-29 19:55:08 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 36 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 85.24.200.219
Who owns the IP address 85.24.200.219?
85.24.200.219 is registered to BAHNHOF-NCC. The address falls within the 85.24.200.0/23 network block. Registration is held at RIPE.
Where is 85.24.200.219 located?
Geolocation data places 85.24.200.219 in Hudiksvall, Gävleborg County, Sweden. The local time zone is Europe/Stockholm. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 85.24.200.219 malicious or safe?
85.24.200.219 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 85.24.200.219?
The reverse DNS (PTR) record for 85.24.200.219 is h-85-24-200-219.A158.priv.bahnhof.se. This hostname is forward-confirmed, meaning it resolves back to the same address.
What ports are open on 85.24.200.219?
Responsive ports observed on 85.24.200.219 include 80, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.