185.80.91.81📋 Copy

# IP Intelligence Briefing: 185.80.91.81/32

Classification: LOW RISK

Date: 2026-06-17

Source: IPDebrief Intelligence Platform

---

## Executive Summary

IP 185.80.91.81 presents a low-risk profile with a risk score of 25. The address operates as a web server from Russia under RIPE registry allocation (ASN 216334). While the IP maintains a stable operational posture with no persistent malicious activity detected, it exhibits one DNSBL listing and shows recent connection failure signals. No immediate blocking action is required, but monitoring is recommended.

---

## Technical Profile

---

## Network Services & Infrastructure

The IP operates three services:

• Port 80/tcp (HTTP) – Standard web traffic
• Port 443/tcp (HTTPS) – Encrypted web traffic
• Port 22/tcp (SSH) – OpenSSH 9.6p1 Ubuntu-3ubuntu13.16

Web Server Fingerprint: Caddy web server detected. No TLS certificate currently associated with the IP.

DNS Resolution: PTR record resolves to 215075.landvps.online. Forward DNS confirmation unavailable. No SPF or DMARC records present.

---

## Threat Assessment

Threat Indicators: None detected

• Not a known attacker
• Not a spam source
• Not a Tor exit node
• No associated threat campaigns

DNSBL Status: Listed on 1 of 8 threat feeds. Classification: Minimal operator risk (operator score: 0.1304).

Abuse Confidence: Null (insufficient data for confidence scoring).

---

## Observation History

Total signals observed: 23

Recent Activity (2026-06-17):

• Connection failures observed on HTTPS probes
• Port scanning activity detected across multiple ports
• ASN 216334 allocation confirmed (registered 2023-09-08, age: 1,013 days)
• BGP prefix 185.80.91.0/24 remains stable with zero changes in 30-day window

Temporal Analysis: No persistent malicious behavior detected. Threat persistence days: 0.

---

## Neighborhood & Relationship Context

Subnet Analysis (185.80.91.0/24):

• Abuse Density: 0
• Classification: mostly_clean
• Total Siblings: 1
• Threat Siblings: 1
• Inherited Risk: 2

Network Relationships: 42 relationships identified, primarily Same Network associations with RU-landvps network designation.

---

## Recommended Actions

No immediate firewall rules or blocking actions recommended. The IP presents below-threshold risk for most security policies. Standard monitoring practices should apply.

Firewall Recommendations: None

Monitoring Priority: Low

---

## Intelligence Conclusion

The IP address 185.80.91.81 operates as a legitimate web server infrastructure from Russia with standard web services and SSH access. Risk indicators are minimal, with the sole concern being a single DNSBL listing. The network environment shows low abuse density and stable routing characteristics. No evidence of malicious activity or persistent threat behavior. Continue routine monitoring without elevated alerting.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.