31.220.80.85📋 Copy

## IP Intelligence Briefing: 31.220.80.85/32

Classification: Low Risk Cloud Hosting Infrastructure

Date: 2026-06-20

Risk Score: 25/100

Executive Summary

IP 31.220.80.85 is a Contabo cloud hosting resource (ASN 51167) configured as a web server. The IP presents a low-risk profile with no active threat indicators, zero blacklist listings, and no observed malicious activity. The address is associated with the domain comidaf.com and resolves to a virtual machine identifier (vmi3278086) within the contaboserver.net infrastructure.

Network Classification

• Provider: Contabo (CloudCompute infrastructure)
• ASN: 51167 / 51167 (Johannes Selg)
• Geolocation: Germany (DE) — reported location: Denia
• CIDR Block: 31.220.80.0/21
• Infrastructure Type: Cloud hosting with public web services
• Network Role: Web Server (HTTP/HTTPS)

Observed Services & Configuration

• TLS Configuration: TLS 1.3, Cipher: TLS_AES_256_GCM_SHA384
• Web Server: nginx/1.24.0 (Ubuntu)
• SSH Version: OpenSSH_9.6p1 Ubuntu-3ubuntu13.16
• Certificate Authority: Let's Encrypt
• Certificate Subject: comidaf.com
• DNS PTR: vmi3278086.contaboserver.net

Threat Indicators

• Blacklist Status: Clean (0 DNSBL listings)
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable
• Threat Observation Count: 1

Historical Observations (23 Total Signals)

Recent observations indicate stable infrastructure characteristics:

• DNS Resolutions: comidaf.com and contaboserver.net
• HTTP Status: 400 (Bad Request) observed
• TLS Fingerprint: Consistent TLS 1.3 configuration
• Server Headers: nginx/1.24.0, Ubuntu-based
• No Significant Changes: No escalation in risk profile over monitoring period

Relationship Graph (40 Relationships)

• DNS Associations: vmi3278086.contaboserver.net (multiple entries)
• Network Affiliations: Network TT-20230217
• No Malicious Correlations: No relationships to known threat actors or campaigns

Neighborhood Analysis (31.220.80.0/24)

• Subnet Classification: Clean
• Abuse Density: 0%
• Active Siblings: 1
• Threat Siblings: 0
• High-Risk Neighbors: 0

Recommended Actions

No immediate security actions required. The IP demonstrates a clean security posture appropriate for standard cloud hosting operations. Routine monitoring is recommended to verify continued compliance with acceptable use policies.

SOC Analyst Notes

This IP represents a standard cloud computing resource with no evidence of malicious activity. The Contabo hosting environment (ASN 51167) shows no subnet-wide abuse patterns. Traffic to/from this IP should be permitted per standard web server policies. The presence of SSH port 22 is expected for cloud infrastructure management.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.