92.206.184.214📋 Copy

THREAT INTELLIGENCE BRIEFING

Target IP: 92.206.184.214/32

Classification: CLEAN / LOW RISK

Date: 2026-07-27

---

EXECUTIVE SUMMARY

IP address 92.206.184.214 is classified as LOW RISK with a risk score of 0. The address belongs to Tele Columbus IP Contact (AS16202) and is part of the PRIMACOM-HEADENDS-2015-06 network block (92.206.128.0/18) in Leipzig, Saxony, Germany. No malicious indicators, threat activity, or suspicious behavior were detected. The IP shows no services, no open ports, and no network-level threats.

---

OWNERSHIP & GEOLOCATION

• ASN: 16202
• Organization: Tele Columbus IP Contact
• Network: PRIMACOM-HEADENDS-2015-06
• CIDR Block: 92.206.128.0/18
• Country: DE (Germany)
• Region: Saxony
• City: Leipzig
• Coordinates: 51.17°N, 10.45°E
• RIR: RIPE

---

THREAT INDICATORS

• Risk Score: 0 (Low Risk)
• Abuse Confidence Score: None
• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Threat Feeds: No matches detected across monitored threat intelligence sources.

---

NETWORK BEHAVIOR & SERVICES

• Open Ports: None detected
• Services: None (Firewalled / No Services)
• TLS Certificate: None
• HTTP Title: None
• DNS Records: No forward resolution, 0 hosted domains
• Email Authentication: No SPF, DMARC, or TXT records configured
• Anycast: No
• Hosting/Cloud/VPN/Proxy: No

The IP exhibits no active services or network-facing applications, suggesting it is either an internal host, infrastructure device, or decommissioned address.

---

SUBNET ANALYSIS

• Subnet: 92.206.184.214/24
• Abuse Density: 0 (Clean)
• Classification: Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

The immediate /24 subnet shows no abuse activity. No neighboring IPs flagged for malicious activity.

---

RELATIONSHIP GRAPH

5 relationships identified, all classified as "Same Network" pointing to PRIMACOM-HEADENDS-2015-06. These represent network-level associations within the same organization and do not indicate suspicious relationships or command-and-control infrastructure.

---

OBSERVATION HISTORY

Total observations: 16 signals recorded

Recent Activity:

• Geolocation: Consistent detection in Germany (DE), Leipzig region
• Ownership: No ownership changes detected
• Threat Persistence: 0 days
• Malicious Classification: Not persistently malicious

Network Pathing:

• Hop count: 14
• Transit networks include Comcast
• Average RTT: 123.4ms
• Minimum possible RTT: 8.2ms

Control Plane:

• Route stability: False
• RPKI state: Not evaluated
• Route changes (30d): 0

---

RECOMMENDED ACTIONS

Security Actions: No firewall rules or blocking recommendations generated. The IP presents no actionable threat indicators.

Monitoring Recommendation: Continue standard monitoring. No immediate blocking or rate-limiting required.

---

ANALYST NOTES

This IP address demonstrates no malicious characteristics across all evaluated dimensions. The absence of open ports, services, and threat indicators combined with a clean subnet classification supports classification as benign infrastructure. No further investigation or defensive measures are warranted at this time.

Confidence Level: High – Based on comprehensive multi-signal analysis including geolocation, network behavior, threat feeds, and historical observations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.