109.76.101.92📋 Copy

# IP INTELLIGENCE BRIEFING: 109.76.101.92/32

Date: Current Analysis

Risk Classification: Moderate Risk (Score: 40)

---

## EXECUTIVE SUMMARY

IP 109.76.101.92 presents as a moderate-risk address associated with Vodafone Ireland mobile DSL infrastructure. The address demonstrates geolocation inconsistencies and DNSBL listings that warrant defensive consideration despite a clean neighborhood classification.

---

## OWNERSHIP & NETWORK ATTRIBUTES

• ASN: 15502 (Vodafone Ireland)
• Organization: Alex Dempsey
• Network Name: VODAFONE-IRELAND-MOBILE-DSL
• CIDR Block: 109.76.96.0/21
• RIR Registration: ARIN
• Network Classification: Infrastructure (Firewalled / No Services)

---

## GEOLOCATION ANALYSIS

⚠️ CRITICAL FINDING: Geolocation Inconsistency Detected

• Primary Location: New York, US (US-NY)
• Secondary Location: Dublin 2, Ireland (IE)
• Geo Consensus: FALSE (conflicting signals)
• Geo Plausibility: FALSE

The address exhibits significant geolocation validation failures, with conflicting data between US and Irish registries. This inconsistency suggests potential routing anomalies or data collection discrepancies.

---

## THREAT INDICATORS

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listings: 2 of 8 total lists
• Max Severity: High (DNSBL listing)
• Known Campaigns: None correlated

No active threat indicators detected. The address is not associated with known attacker campaigns or persistent malicious activity.

---

## NETWORK BEHAVIOR

• Open Ports: None detected
• Services: None exposed
• TLS Certificate: None
• Connection Type: Firewalled
• Network Role: Provider infrastructure

The IP presents no open service surfaces, functioning as firewalled infrastructure.

---

## NEIGHBORHOOD ASSESSMENT

Subnet: 109.76.101.92/24

• Abuse Density: 0 (Clean)
• Classification: Clean
• Threat Siblings: 0
• Active Siblings: 0
• Total Siblings: 1

The /24 subnet demonstrates no abuse patterns, with this IP being the only active address in the neighborhood.

---

## OBSERVATION HISTORY

Total Observations: 15

• Recent Activity: July 18, 2026 (most recent)
• Ownership Changes: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: No

Historical data indicates stable ownership with no persistent malicious behavior patterns.

---

## RECOMMENDED ACTIONS

Risk-Based Recommendation: BLOCK

Despite moderate risk scoring, the following firewall rules are recommended:

---

## INTELLIGENCE JUDGMENT

This address warrants defensive blocking due to:

1. Geolocation validation failures (US/IE conflict)

2. DNSBL listings (2 of 8 lists, max severity high)

3. Moderate risk score (40/100)

4. Lack of service transparency (firewalled infrastructure)

Action Required: Implement blocking rules at network perimeter. Monitor for any service emergence or behavioral changes.

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.