92.117.102.204
IP Intelligence Briefing: 92.117.102.204
Date: 2026-06-09
---
**1. Core Profile**
- Risk Score: Moderate (50/100)
- Ownership: Registered to 1&1 Telekom (AS8881, Germany) under RIPE.
- Geolocation: Germany (Rheinland-Pfalz, Hörnbrunn), coordinates 50.43°N, 7.66°E.
- Network Role: Residential / Firewalled (no open services detected).
- Threat Indicators: No malicious activity observed (no blacklists, campaigns, or DNS-based threats).
---
**2. Observation History**
- Recent Activity (Last 30 Days):
- 19 signals recorded, including DNS resolution, geolocation, and network infrastructure analysis.
- No persistent malicious behavior or campaign associations.
- DNS Associations: Strong ties to `versanet.de` (residential ISP).
- BGP Data: Prefix `92.117.96.0/19` linked to 1&1 Telekom.
- No Tor/VPN/Proxy Indicators: Confirmed residential connection.
---
**3. Network Relationships**
- Key Associations:
- DNS: Multiple PTR records pointing to `i5C7566CC.versanet.de` (residential).
- Network: Subnet `92.117.102.204/24` linked to provider `ONEANDONE-ACCESS`.
- No Malicious Links: No connections to known C2 servers, botnets, or malicious domains.
---
**4. Neighborhood Analysis**
- Subnet: `92.117.102.204/24`
- Abuse Density: 0% (clean subnet).
- Neighbors: No active or risky sibling IPs detected.
---
**5. Recommendations**
- Monitor: Track DNS and geolocation consistency, as no recent threats were observed.
- No Action Required: No immediate mitigation needed for this IP.
- Investigate: Verify subnet isolation (no neighbors) and confirm residential legitimacy.
Conclusion: This IP is a legitimate residential connection from a German ISP with no signs of malicious activity. No further action is required unless new threats emerge.
Source: IPDebrief Threat Intelligence Platform.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | de-1and1telecom-1-mnt |
| ASN | AS8881 |
| Network Name | — |
| CIDR Block | — |
| RIR | RIPE |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | i5C7566CC.versanet.de |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | i5C7566CC.versanet.de |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 2 | 2 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 13% | 1 | 1 |
| Overall | 16% | 8 | 9 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-22 03:10:59 UTC |
| Last Seen | 2026-06-09 19:11:15 UTC |
| Profile Built | 2026-06-09 19:13:52 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.