# 92.208.33.43 — IP Intelligence Summary

92.208.33.43 is an IPv4 address operated by Vodafone Germany IP Core Backbone (AS3209), geolocated to Düsseldorf, Germany. It belongs to a mobile network with reverse DNS name ipservice-092-208-033-043.092.208.pools.vodafone-ip.de. As of October 6, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/92.208.33.43
- Last updated: 2026-10-06

## Ownership

- Organization: Vodafone Germany IP Core Backbone
- Network name: VFDE-IP-SERVICE-01
- Allocated block: 92.208.0.0/15
- ASN: AS3209 (https://ipdebrief.com/asn/3209)
- Regional registry: RIPE

## Location

- City: Düsseldorf
- Region: North Rhine-Westphalia
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: MobileCarrier
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (0/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ipservice-092-208-033-043.092.208.pools.vodafone-ip.de
- Forward-confirmed: yes

## Analyst narrative

\## IP Intelligence Briefing: 92.208.33.43/32

**Classification:** Low Risk – Mobile Carrier Infrastructure

**Analysis Date:** Current

**Threat Level:** Low

\### Executive Summary

IP address 92.208.33.43 is identified as Vodafone Germany mobile carrier infrastructure (ASN 3209) located in Düsseldorf, North Rhine-Westphalia. The IP carries a low-risk profile (score: 25) with no active threat indicators. Historical observations indicate consistent mobile carrier classification with no persistent malicious activity detected.

\### Ownership and Network Context

| Attribute | Value |

|-----------|-------|

| **Organization** | Vodafone Germany IP Core Backbone |

| **ASN** | 3209 |

| **Network** | 92.208.0.0/15 |

| **Country** | Germany (DE) |

| **City** | Düsseldorf |

| **Infrastructure Type** | Mobile Carrier (LTE/5G) |

| **Registration** | RIR: RIPE |

The IP resolves to PTR hostname \`ipservice-092-208-033-043.092.208.pools.vodafone-ip.de\` with forward DNS confirmation. No open ports, TLS certificates, or web services detected.

\### Threat Assessment

**Current Risk Profile:**

\- **Risk Score:** 25 (Low)

\- **Abuse Confidence:** Not applicable

\- **Blacklist Status:** 0 blacklist entries

\- **Known Campaigns:** None

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

**Control Plane Analysis:**

\- Origin ASN: 3209

\- BGP Prefix: 92.208.0.0/14

\- Route Stability: Unstable

\- DNSBL Listings: 1 of 8 total lists (max severity: high)

\- RPKI State: Not validated

\- IRR Consistency: Not available

\### Neighborhood Analysis

**Subnet:** 92.208.33.43/24

\- **Abuse Density:** 25%

\- **Classification:** Mostly Clean

\- **Total Siblings:** 4

\- **Active Siblings:** 1

\- **Threat Siblings:** 1

\- **Inherited Risk Score:** 2

**Adjacent IPs Monitored:**

\- 92.208.33.59 (Risk: 25, Authority: 60)

\- 92.208.33.161 (Risk: 25, Authority: 60)

\- 92.208.33.195 (Risk: 25, Authority: 60)

\### Historical Observations

**Total Signal Count:** 18 observations

**Key Historical Signals:**

1. **Geolocation:** Consistent DE placement with coordinates (51.17, 10.45), 400km accuracy radius

2. **DNSBL:** Listed on 1 of 8 threat feeds (max severity: high)

3. **Subnet Classification:** Maintained "mostly_clean" status with 25% abuse density

4. **Ownership:** Stable with 0 ownership changes recorded

\### Related Entities

\- **Network:** VFDE-IP-SERVICE-01

\- **DNS Hostname:** ipservice-092-208-033-043.092.208.pools.vodafone-ip.de

\### Security Recommendations

**No Immediate Action Required.**

This IP represents legitimate mobile carrier infrastructure with no active threat indicators. Standard carrier IP handling applies:

\- Allow legitimate mobile carrier traffic (LTE/5G)

\- No firewall blocking recommended

\- Monitor for unusual outbound connections from this subnet

\- Consider geo-blocking only if traffic patterns warrant it

**SOC Monitoring Notes:**

\- Low-risk mobile carrier IP – treat as infrastructure

\- Monitor subnet 92.208.33.0/24 for coordinated activity

\- Historical DNSBL listing (1 of 8 feeds) warrants periodic review

\- No correlation with known APT campaigns or malware infrastructure

\---

*Intelligence compiled via IPDebrief Platform. Data current as of analysis timestamp.*

## Nearby addresses

- 92.208.33.59 (https://ipdebrief.com/92.208.33.59)
- 92.208.33.108 (https://ipdebrief.com/92.208.33.108)
- 92.208.33.161 (https://ipdebrief.com/92.208.33.161)
- 92.208.33.195 (https://ipdebrief.com/92.208.33.195)

---

Source: IPDebrief, "92.208.33.43 IP intelligence", https://ipdebrief.com/92.208.33.43, updated 2026-10-06. Assessments are probabilistic.