## IP Intelligence Briefing: 91.80.152.10
Classification: LOW RISK โ Mobile Carrier Infrastructure
Report Date: 2026-07-29
Analyst: IPDebrief Intelligence Team
Executive Summary
IP address 91.80.152.10 is identified as legitimate mobile carrier infrastructure operated by Vodafone Italia S.p.A. (ASN 30722). The IP is classified as low risk (score: 25) with no active threat indicators. Network role analysis confirms the address functions as a mobile carrier endpoint with no open services.
Technical Profile
- Owner: Vodafone Italy (VODAFONE-IT-21)
- ASN: 30722
- CIDR Block: 91.80.128.0/17
- Infrastructure Type: Mobile Carrier
- Connection Type: LTE/5G
- Geolocation: San Giustino Valdarno, Tuscany, Italy (Europe/Rome timezone)
- Risk Score: 25 (Low Risk)
- Provider Score: 0
- Authority Score: 0
Network Classification
The IP is classified as mobile infrastructure with the following characteristics:
- Is Mobile: Yes
- Is Cloud/CDN/VPN/Proxy: No
- Is Tor Exit: No
- Is Known Attacker: No
- Is Spam Source: No
- Blacklist Count: 0
- Services: No open ports detected
- DNS Resolution: No PTR records, no forward resolution
Threat Indicators
- Known Campaigns: None
- Threat Feeds: Empty
- Abuse Confidence Score: Not applicable (mobile infrastructure)
- DNSBL Listed: 1 of 8 lists (likely false positive for mobile carrier traffic)
- Persistence: No persistent malicious activity detected
Observation History
Signal history shows 14 observations with the following patterns:
- Recent Activity: Last observed 2026-07-29T15:49:45Z
- Geolocation Consistency: Italy (confidence: 0.52)
- Infrastructure Consistency: Mobile carrier classification maintained
- Threat Persistence: 0 days (not persistently malicious)
- Ownership Changes: 0
- Blacklist Status: Listed on 1 of 8 total lists with high severity designation (likely carrier routing list)
Neighborhood Analysis
Subnet 91.80.152.10/24 analysis:
- Abuse Density: 0 (clean subnet)
- Total Siblings: 3
- Active Siblings: 0
- Threat Siblings: 0
- Risk Distribution: 1 high-risk, 1 medium-risk, 1 low-risk neighbor
Neighbor IPs:
| IP Address | Risk Score | Authority Score |
|---|---|---|
| 91.80.152.183 | 25 | 50 |
| 91.80.152.202 | 40 | 50 |
Relationship Graph
Three network relationships identified, all pointing to VODAFONE-IT-21 network prefix. No certificate associations or external hostname relationships detected.
Recommended Actions
No specific firewall rules or blocking actions recommended. This IP represents legitimate mobile carrier infrastructure.
Intelligence Assessment
IP 91.80.152.10 is Vodafone mobile network infrastructure with normal carrier risk characteristics. The low risk score (25), clean subnet classification, and absence of threat indicators support classification as benign infrastructure. The single blacklist listing appears to be related to carrier routing policies rather than malicious activity. SOC teams may consider this IP for allow-listing if legitimate mobile traffic is expected from Vodafone Italy networks.
Priority: LOW โ Continue monitoring standard traffic patterns. No immediate action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Vodafone Italy |
| ASN | AS30722 |
| Network Name | VODAFONE-IT-21 |
| CIDR Block | 91.80.128.0/17 |
| RIR | RIPE |
| Country | IT |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-22 19:33:35 UTC |
| Last Seen | 2026-07-29 15:45:54 UTC |
| Profile Built | 2026-07-29 15:58:11 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 17 |
Full dossier details are available via our API.