80.241.211.203
IP Intelligence Briefing: 80.241.211.203
*Generated via IPDebrief Analysis*
---
**Risk Overview**
- Risk Score: Moderate (50/100)
- Provider: Contabo (AS51167)
- Geolocation: Munich, Germany (51.17°N, 10.45°E)
- Network Role: Cloud Compute instance (hosted by Contabo, no public services detected)
---
**Threat Indicators**
- No direct malware/campaign associations detected.
- Subnet Abuse Density: 1/10 (mostly clean, but 1 threat sibling in 80.241.211.0/24 subnet).
- DNS Associations: Linked to `cloud.squadinventive.com` (SPF/DMARC records present).
---
**Historical Observations**
- First Recorded: June 1, 2026.
- Risk Trends: No persistent malicious activity; last observation shows no active threats.
- BGP Context: Part of `80.241.210.0/23` prefix, with stable routing (no recent changes).
---
**Network Relationships**
- Hosting Provider: Contabo (AS51167, Johannes Selg).
- DNS: Resolves to `cloud.squadinventive.com` (no malicious email headers detected).
- Subnet: `80.241.211.0/24` (1 threat sibling, 0 active malicious IPs).
---
**Actionable Intelligence**
1. Monitor Subnet: The `80.241.211.0/24` subnet has 1 threat sibling; investigate potential lateral movement or shared infrastructure risks.
2. Validate DNS: Confirm `cloud.squadinventive.com`’s legitimacy via WHOIS and DNSSEC validation.
3. Check Hosting Provider: Contabo’s infrastructure is generally stable, but verify if the account is associated with known compromised services.
4. No Immediate Mitigation Needed: The IP shows no active threats, but its subnet’s low abuse density suggests minimal risk.
---
Conclusion: This IP is a legitimate cloud compute instance with no direct malicious activity. Focus on monitoring its subnet and associated domain for anomalies. No immediate firewall rules or blocking actions recommended.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Johannes Selg |
| ASN | AS51167 |
| Network Name | CONTABO |
| CIDR Block | 80.241.208.0/21 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | cloud.squadinventive.com |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | cloud.squadinventive.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 20% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-27 13:18:08 UTC |
| Last Seen | 2026-06-29 04:31:04 UTC |
| Profile Built | 2026-06-29 04:32:50 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
Full dossier details are available via our API.