# 195.2.20.221 — IP Intelligence Summary

195.2.20.221 is an IPv4 address operated by Vodafone IP GSOC (AS1273), geolocated to New York, United Kingdom. Its reverse DNS name is ae28-tcr1.fis.cw.net. As of November 7, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/195.2.20.221
- Last updated: 2026-11-07

## Ownership

- Organization: Vodafone IP GSOC
- Network name: CW-CWINTERN-NET
- Allocated block: 195.2.20.0/24
- ASN: AS1273 (https://ipdebrief.com/asn/1273)
- Regional registry: RIPE

## Location

- City: New York
- Region: US-NY
- Country: United Kingdom
- Time zone: Europe/London

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (0/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ae28-tcr1.fis.cw.net
- Forward-confirmed: yes

## Analyst narrative

IP 195.2.20.221 was identified as a low-risk endpoint associated with Vodafone IP GSOC (ASN 1273, Org CW-CWINTERN-NET). Geolocation data placed the host in the United Kingdom with coordinates 51.5, -0.12, though one source registered the city as New York. Reverse DNS returned ae28-tcr1.fis.cw.net and was forward-confirmed.

Network scanning detected no open ports, TLS certificates, or HTTP services. The address returned a risk score of 0 and was not flagged as a known attacker, spam source, or Tor exit node. Blacklist checks returned zero hits. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or total incidents.

The immediate /24 neighborhood (195.2.20.0/24) exhibited an abuse density of 0.25 with three threat siblings, resulting in an inherited risk score of 7. Despite the neighborhood context, the specific IP remained unlisted. The analysis concluded with a recommendation to Allow the traffic with info severity, citing the forward-confirmed reverse DNS and lack of active threat indicators.

## Nearby addresses

- 195.2.20.1 (https://ipdebrief.com/195.2.20.1)
- 195.2.20.5 (https://ipdebrief.com/195.2.20.5)
- 195.2.20.9 (https://ipdebrief.com/195.2.20.9)
- 195.2.20.10 (https://ipdebrief.com/195.2.20.10)
- 195.2.20.65 (https://ipdebrief.com/195.2.20.65)
- 195.2.20.93 (https://ipdebrief.com/195.2.20.93)
- 195.2.20.118 (https://ipdebrief.com/195.2.20.118)
- 195.2.20.178 (https://ipdebrief.com/195.2.20.178)
- 195.2.20.213 (https://ipdebrief.com/195.2.20.213)
- 195.2.20.229 (https://ipdebrief.com/195.2.20.229)
- 195.2.20.245 (https://ipdebrief.com/195.2.20.245)

---

Source: IPDebrief, "195.2.20.221 IP intelligence", https://ipdebrief.com/195.2.20.221, updated 2026-11-07. Assessments are probabilistic.