# 92.209.187.225 — IP Intelligence Summary

92.209.187.225 is an IPv4 address operated by Vodafone Germany IP Core Backbone (AS3209), geolocated to Frankfurt am Main, Germany. It belongs to a mobile network with reverse DNS name ipservice-092-209-187-225.092.209.pools.vodafone-ip.de. As of August 29, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/92.209.187.225
- Last updated: 2026-08-29

## Ownership

- Organization: Vodafone Germany IP Core Backbone
- Network name: VFDE-IP-SERVICE-01
- Allocated block: 92.208.0.0/15
- ASN: AS3209 (https://ipdebrief.com/asn/3209)
- Regional registry: RIPE

## Location

- City: Frankfurt am Main
- Region: Hesse
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: MobileCarrier
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ipservice-092-209-187-225.092.209.pools.vodafone-ip.de
- Forward-confirmed: yes

## Analyst narrative

**IP Intelligence Briefing: 92.209.187.225**

**Executive Summary**

IP address 92.209.187.225 belongs to Vodafone Germany's mobile carrier backbone infrastructure. The address demonstrates low-risk characteristics typical of legitimate mobile network provisioning, with no active threat indicators detected.

**Ownership and Infrastructure**

The IP is registered to Vodafone Germany IP Core Backbone (AS3209) within the VFDE-IP-SERVICE-01 network block (92.208.0.0/15). Geolocation data places the endpoint in Frankfurt am Main, Hesse, Germany. Reverse DNS resolution confirms the address as ipservice-092-209-187-225.092.209.pools.vodafone-ip.de, consistent with Vodafone's mobile carrier addressing scheme.

**Network Classification and Services**

Classification identifies the address as a mobile carrier endpoint (LTE/5G) with no publicly accessible services. No open ports, TLS certificates, or HTTP banners were detected. The infrastructure operates as a firewalled mobile carrier node rather than traditional hosting infrastructure.

**Threat Indicators**

The IP carries a risk score of 25 with zero active threat indicators. No blacklist enumerations, known attacker signatures, spam source indicators, or Tor exit node activity were observed. One DNSBL listing was detected across eight total threat feeds. The address shows no threat persistence and zero threat observation count in historical data.

**Subnet Environment**

The /24 subnet (92.209.187.0/24) contains 11 sibling addresses. Abuse density measures at 0.0909 with classification "mostly_clean." Risk distribution shows zero high-risk neighbors, one medium-risk neighbor (92.209.187.220, risk score 40), and nine low-risk neighbors. The address operates within a relatively clean mobile carrier subnet environment.

**Historical Observations**

Nineteen signal observations recorded between 2026-07-27. Recent probes indicate ICMP validation blocked, but geolocation remains plausible with 400 km accuracy radius. No ownership changes, threat observations, or persistent malicious activity detected throughout the observation window.

**Recommended Actions**

No immediate blocking or mitigation actions required. The address demonstrates legitimate mobile carrier behavior consistent with Vodafone network operations. Standard allow policies apply for traffic from this IP. SOC analysts should monitor for any unexpected traffic patterns, though no current threat indicators warrant defensive action.

## Nearby addresses

- 92.209.187.3 (https://ipdebrief.com/92.209.187.3)
- 92.209.187.19 (https://ipdebrief.com/92.209.187.19)
- 92.209.187.22 (https://ipdebrief.com/92.209.187.22)
- 92.209.187.33 (https://ipdebrief.com/92.209.187.33)
- 92.209.187.42 (https://ipdebrief.com/92.209.187.42)
- 92.209.187.65 (https://ipdebrief.com/92.209.187.65)
- 92.209.187.76 (https://ipdebrief.com/92.209.187.76)
- 92.209.187.79 (https://ipdebrief.com/92.209.187.79)
- 92.209.187.80 (https://ipdebrief.com/92.209.187.80)
- 92.209.187.81 (https://ipdebrief.com/92.209.187.81)
- 92.209.187.92 (https://ipdebrief.com/92.209.187.92)
- 92.209.187.97 (https://ipdebrief.com/92.209.187.97)

---

Source: IPDebrief, "92.209.187.225 IP intelligence", https://ipdebrief.com/92.209.187.225, updated 2026-08-29. Assessments are probabilistic.