IPDebrief

80.241.210.178

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP INTELLIGENCE BRIEFING: 80.241.210.178/32

Classification: Moderate Risk | Date: Current Analysis | Status: Active Monitoring

---

EXECUTIVE SUMMARY

IP 80.241.210.178 is a Contabo cloud infrastructure host operating as a web server in Munich, Germany. The IP presents moderate risk (score: 40) with no confirmed malicious activity but shows presence on 2 DNS blacklist sources. The address is part of a /24 subnet with low abuse density (0.0) and 3 active sibling IPs, all classified as low-risk.

---

INFRASTRUCTURE PROFILE

AttributeValue
**ASN**51167 (Contabo)
**Organization**Johannes Selg
**Location**Munich, Germany (51.17°N, 10.45°E)
**Infrastructure Type**CloudCompute / Hosting
**Network Role**Web Server
**Cloud Provider**Contabo

---

NETWORK SERVICES

- Subject: CN=pos.africoretechsolutions.com

- Issuer: CN=E8, O=Let's Encrypt, C=US

- Certificate Type: Valid (not self-signed)

---

DNS ANALYSIS

- SPF: Configured (v=spf1 ip4:84.247.137.130 +a +mx ~all)

- DMARC: Configured (p=none, rua=mailto:dmarc@smtp-staging.mailtrap.net)

- TXT Records: 7 total

---

THREAT INDICATORS

IndicatorStatus
**Risk Score**40/100 (Moderate)
**Known Attacker**No
**Tor Exit Node**No
**Spam Source**No
**Blacklist Count**2
**Threat Feeds**None
**Known Campaigns**None
**DNSBL Listings**2/8 total lists
**Route Stability**Unstable (false)

---

GEOGRAPHICAL VALIDATION

---

TEMPORAL ANALYSIS

---

SUBNET ANALYSIS (80.241.210.0/24)

MetricValue
**Abuse Density**0.0 (Low)
**Classification**Mostly Clean
**Total Siblings**3
**Active Siblings**3
**Threat Siblings**3

Identified Neighbors:

---

KEY OBSERVATIONS

1. The IP resolves to a Contabo virtual machine (vmi3259889.contaboserver.net), consistent with cloud hosting infrastructure

2. TLS certificate indicates association with africoretechsolutions.com domain

3. Email authentication (SPF/DMARC) is properly configured

4. No malicious threat indicators detected in current scans

5. Two DNSBL listings present but no active threat indicators

6. Subnet abuse density is minimal, suggesting legitimate cloud usage

---

RECOMMENDATIONS

Immediate Actions:

Network Defense:

Long-term Monitoring:

---

Analyst Notes: This IP represents standard cloud hosting infrastructure with moderate risk primarily due to DNSBL presence. No active threat indicators detected. Continue standard monitoring protocols and correlate with any incoming security alerts.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇩🇪 Germany
RegionBY
CityMunich
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

🏢 Ownership & Registration

OrganizationJohannes Selg
ASNAS51167
Network Name—
CIDR Block—
RIRRIPE
Country—
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRvmi3259889.contaboserver.net
Forward ConfirmedYes — FCrDNS verified
Forward Hostnamesvmi3259889.contaboserver.net

🔐 DNS Hygiene

Hygiene Score80% (Excellent)
SPF1/2 domains
DMARC1/2 domains
FCrDNSVerified
DNSSECValid
CAANot configured
Domains Checked2 domains

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting — Infrastructure provider without advanced routing
CloudHosting

🔌 Services & Open Ports

PortServiceProtocolBanner
80httptcp—
443httpstcp—
8080http-alttcp—
Closed Ports22, 25, 3389, 8443 (3 open / 7 scanned)
Servernginx/1.20.1
HTTP Title—

🔐 TLS Certificate

A self-signed certificate was detected. This is common for development servers, internal services, or IoT devices.
⚠️
CN=80.241.210.178
Issued by CN=80.241.210.178
Self-signed: Yes
SANsNone
Valid From2026-05-29T09:32:56+00:00
Valid Until2036-05-26T09:32:56+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period3650 days
Serial Number4438051ACC46A893CEA061C17F9CB4DA2B8948B4
ThumbprintB47C9D683EDE9349B7610077282193CB8D9AF902

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
24
routing
13%
11
services
34%
23
ownership
24%
23
reputation
30%
13
geolocation
23%
22
Overall25%1016
Coverage: 6/6 dimensions · Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-05-10 10:14:06 UTC
Last Seen2026-06-27 17:40:40 UTC
Profile Built2026-06-28 11:46:11 UTC
Data FreshnessLive
Signal Types22
Total Observations28
🔍 22 signal types · 28 observations collected
This report is generated from 22+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.