80.187.81.87📋 Copy

# IP Intelligence Briefing: 80.187.81.87/32

Classification: Low Risk – Mobile Device with Minimal Threat Posture

Date: 2026-07-30

Analyst: IPDebrief Intelligence Unit

---

## Executive Summary

IP 80.187.81.87 is a low-risk mobile device address associated with the CUSTOMERS-DE network infrastructure. Risk score of 15 indicates minimal threat posture with no active malicious indicators observed.

## Technical Profile

• Owner: Alexander Schloesser (ASN 3320)
• Network Block: 80.187.0.0/18
• Geolocation: Munich, Bavaria, DE (51.17°N, 10.45°E)
• Connection Type: Mobile LTE/5G (Deutsche Telekom AG, MCC 262/MNC 01)
• Reverse DNS: tmo-081-87.customers.d1-online.com
• Service Status: Firewalled / No Open Services Detected
• DNSSEC: Valid

## Threat Indicators

• Current Risk Score: 15/100 (Low)
• Known Campaigns: None
• Blacklist Status: Listed on 1 of 8 DNSBL sources
• Reputation Flags: Not a Tor exit, not a known attacker, not a spam source
• Abuse Confidence: Not elevated

## Historical Activity

Eighteen observations recorded since 2026-07-30. Recent activity includes:

• Port scanning reconnaissance attempts
• DNS resolution confirmation for d1-online.com domain
• Geolocation inference consistent with Munich region
• No persistent malicious behavior detected

## Network Context

Subnet Analysis (80.187.81.0/24):

• 9 neighbor IPs identified
• Abuse Density: 0.0
• Risk Distribution: 6 low-risk, 0 medium, 0 high-risk neighbors
• Notable neighbors with risk score 25: 80.187.81.55, 80.187.81.110, 80.187.81.164

## Recommended Actions

Based on current risk profile, no immediate firewall or blocking actions recommended. IP may be allowed through with standard logging.

SOC Notes:

• Mobile device traffic should be expected given LTE/5G classification
• Monitor for any changes in DNSBL listings
• No immediate threat action required

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.