IP Intelligence Briefing: 80.174.94.169
Date: 2026-06-10
---
**1. Core Profile**
- Risk Score: Moderate (50/100)
- Ownership:
- ASN: 3257 (netutils-mnt)
- Network: EUROPEAN-LEASE1-NET (RIPE)
- Country: Spain (ES)
- Geolocation:
- City: Newport (Washington, Spain)
- Coordinates: Latitude 40.46, Longitude -3.75 (±500km accuracy)
- Threat Indicators:
- No known malicious activity, spam, or attacker associations.
- No DNSBL listings, Tor exit, or campaign correlations.
---
**2. Network Behavior**
- Control Plane:
- DNSSEC Valid: Yes
- BGP Prefix: 80.174.64.0/19
- Route Stability: Unstable (0 route changes in 30 days)
- Operator Risk: Minimal (0.13)
- Services:
- No open ports, TLS certs, or HTTP services detected.
- Firewalled infrastructure with no active services.
---
**3. Temporal Observations**
- History (Last 30 Days):
- Geolocation: Consistent Spain location (1 observation).
- Control Plane: Minimal operator risk (0.13) with DNSSEC validity.
- Ownership: Stable (no changes).
- Threat Signals: No persistent malicious activity.
---
**4. Network Relationships**
- Subnet: 80.174.64.0/19 (EUROPEAN-LEASE1-NET)
- Neighbors (80.174.94.169/24):
- Low-Risk: 2 IPs (riskScore 25)
- Medium-Risk: 1 IP (riskScore 50)
- Abuse Density: 0% (no malicious neighbors)
---
**5. Threat Context**
- No Malicious Indicators:
- No malware campaigns, phishing, or spam associations.
- No DNS or email reputation issues.
- Geolocation Plausibility:
- Spain location is consistent with ISP ownership but lacks precise coordinates.
---
**6. SOC Recommendations**
- Monitor: Track geolocation consistency and network stability.
- No Immediate Action: No evidence of active threats or malicious behavior.
- Verify: Confirm DNSSEC validity and subnet abuse density for long-term risk assessment.
Product: IPDebrief | Copyright: © 2026 Jason Alberino. All rights reserved.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | netutils-mnt |
| ASN | AS3257 |
| Network Name | EUROPEAN-LEASE1-NET |
| CIDR Block | 80.174.64.0/19 |
| RIR | RIPE |
| Country | EU |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 30% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 14% | 6 | 7 |
| Data Coherence | Mostly Consistent (80%) โ 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-24 12:35:50 UTC |
| Last Seen | 2026-06-10 16:17:10 UTC |
| Profile Built | 2026-06-10 17:04:55 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 16 |
Full dossier details are available via our API.