## Intelligence Briefing: 80.26.229.162/32
Classification: Moderate Risk (Score: 40) | Type: Mobile Carrier Dynamic IP
Executive Summary
80.26.229.162 is a residential mobile carrier IP address assigned to Telefonica de Espana SAU (Movistar). The IP operates within Spain's telecommunications infrastructure and presents moderate risk characteristics primarily due to dynamic residential mobile usage patterns. No active malicious campaigns or persistent threat indicators observed.
Infrastructure Profile
- ASN/Provider: ASN 3352 โ Administradores Telefonica de Espana
- Geolocation: ES (Spain), Castille-La Mancha, Guadalajara
- Network Role: Mobile Carrier (LTE/5G) โ MCC: 214, MNC: 07
- DNS Resolution: 162.red-80-26-229.dynamicip.rima-tde.net (rima-tde.net)
- Service Status: Firewalled / No open services detected
Threat Assessment
- Risk Score: 40 (Moderate)
- Known Threats: None identified
- Blacklist Status: 0 active blacklists
- DNSBL Listings: 2 of 8 total lists
- Abuse Confidence: Not elevated
- Tor/Proxy/VPN: Negative indicators
- Historical Persistence: No persistent malicious pattern observed
Network Context
- Subnet Classification: 80.26.229.0/24 โ Mostly clean (Abuse Density: 0)
- Inherited Risk: 2
- Neighborhood Threats: 1 threat sibling detected in /24
- Route Stability: Unstable (0 changes in 30-day period)
- DNSSEC: Valid
- Operator Classification: Basic (Score: 0.2609)
Observational History
- Signal Count: 20 observations tracked
- Recent Signals: Minimal to Basic risk classification
- Geographic Consensus: Consistent ES attribution
- Threat Persistence Days: 0
Recommended Actions
Given the moderate risk score (40) and mobile carrier classification, defensive measures should balance security requirements with network availability:
| Platform | Recommended Action |
|---|---|
| iptables | DROP traffic from 80.26.229.162/32 |
| nftables | drop rule for source address |
| nginx | deny directive |
| pfSense | Block 80.26.229.162/32 |
| Cloudflare WAF | Block IP (risk score 40) |
| AWS WAF | Add IP to deny list |
Intelligence Note
This IP belongs to a legitimate mobile carrier infrastructure (Movistar). The moderate risk classification stems from typical dynamic residential mobile IP characteristics rather than confirmed malicious activity. SOC analysts should evaluate traffic patterns and correlate with other indicators before implementing blocking measures, as this may impact legitimate mobile user communications.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Administradores Telefonica de Espana |
| ASN | AS3352 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | RIPE |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 162.red-80-26-229.dynamicip.rima-tde.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 162.red-80-26-229.dynamicip.rima-tde.net |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 21% | 9 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-07 23:04:35 UTC |
| Last Seen | 2026-06-23 22:14:11 UTC |
| Profile Built | 2026-06-23 22:21:23 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.