176.95.238.208📋 Copy

IP Intelligence Briefing: 176.95.238.208

Date: 2026-06-02

---

**1. Core Profile**

• Risk Assessment:

- Reputation: Low Risk (riskScore: 0, providerScore: 0, authorityScore: 0).

- Threat Indicators: No malicious activity, spam, or known attacker associations.

- Network Role: Mobile carrier infrastructure (Vodafone Germany IP Core Backbone), LTE/5G network.

• Geolocation:

- Location: Würzburg, Bavaria, Germany (latitude: 51.17, longitude: 10.45).

- ISP: Vodafone GmbH (MCC: 262, MNC: 02).

- Accuracy: 400 km radius, RTT consistency (avg: 120.6 ms).

• Ownership:

- ASN: 3209 (Vodafone Germany).

- Subnet: 176.95.238.208/24, classified as "mostly_clean" with abuse density 1.

---

**2. Network & Service Activity**

• Services:

- Open ports: HTTP (80), HTTPS (443).

- TLS Certificate:

- Issuer: Let’s Encrypt (CN=R10).

- Subject: chefportrait.de (SAN: chefportrait.de).

- Valid: No expiration date provided (may require further validation).

• DNS:

- PTR hostname: *business-176-095-238-208.static.arcor-ip.net*.

- No email authentication records (SPF/DMARC).

• Control Plane:

- BGP prefix: 176.95.0.0/16.

- RPKI state: Not reported.

- DNSSEC: Validated.

---

**3. Observation History**

• Temporal Trends:

- 23 signals recorded (last 30 days).

- No persistent malicious activity; threat observation count: 1.

- Geolocation and network stability consistent over time.

• Anomalies:

- One "connection_failed" signal for HTTPS (confidence: 30%).

- No DNSBL listings or route instability.

---

**4. Relationships & Neighborhood**

• Linked Entities:

- DNS: *business-176-095-238-208.static.arcor-ip.net*.

- Network: DE-ARCOR-20110711 (Vodafone).

• Subnet Analysis:

- /24 Subnet: 176.95.238.208/24.

- Neighbors: 0 active IPs listed (abuse density: 0).

- Classification: "mostly_clean" with inherited risk score: 2.

---

**5. Threat & Actionable Insights**

• No Indicators of Compromise:

- No malware, phishing, or campaign activity detected.

- TLS certificate appears legitimate but tied to a specific domain (*chefportrait.de*).

• SOC Recommendations:

- Monitor traffic to *chefportrait.de* for unusual patterns.

- No immediate firewall rules required due to low risk.

- Validate TLS certificate expiration date for *chefportrait.de*.

---

Conclusion:

This IP is a legitimate mobile carrier asset associated with Vodafone Germany. It serves a business domain (*chefportrait.de*) via HTTPS and shows no malicious activity. No further action is required, but ongoing monitoring of the associated domain is advised.

Product: IPDebrief | Copyright: © 2026 Jason Alberino. All rights reserved.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.