# 92.209.215.21 — IP Intelligence Summary

92.209.215.21 is an IPv4 address operated by Vodafone Germany IP Core Backbone (AS3209), geolocated to Stuttgart, Germany. It belongs to a mobile network with reverse DNS name ipservice-092-209-215-021.092.209.pools.vodafone-ip.de. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/92.209.215.21
- Last updated: 2026-10-06

## Ownership

- Organization: Vodafone Germany IP Core Backbone
- Network name: VFDE-IP-SERVICE-01
- Allocated block: 92.208.0.0/15
- ASN: AS3209 (https://ipdebrief.com/asn/3209)
- Regional registry: RIPE

## Location

- City: Stuttgart
- Region: Baden-Wurttemberg
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: MobileCarrier
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ipservice-092-209-215-021.092.209.pools.vodafone-ip.de
- Forward-confirmed: yes

## Analyst narrative

\# IP Intelligence Briefing: 92.209.215.21

**Classification:** LOW RISK — Mobile Carrier Infrastructure

**Date:** 2026-07-22

**Analyst:** IPDebrief Intelligence

\---

\## Executive Summary

IP address 92.209.215.21/32 is a mobile carrier endpoint belonging to Vodafone Germany's IP Core Backbone infrastructure. The IP demonstrates low-risk characteristics consistent with legitimate mobile carrier operations. No active threat indicators or malicious activity detected.

\---

\## Ownership & Network Classification

\- **Organization:** Vodafone Germany IP Core Backbone (ASN 3209)

\- **Network Name:** VFDE-IP-SERVICE-01

\- **CIDR Block:** 92.208.0.0/15

\- **Registry:** RIPE

\- **Infrastructure Type:** Mobile Carrier (LTE/5G)

\- **Country/Region:** Baden-Württemberg, Germany (DE)

\- **Coordinates:** 51.17°N, 10.45°E (Stuttgart)

\---

\## Risk Assessment

| Metric | Value |

|--------|-------|

| **Risk Score** | 15 (Low Risk) |

| **Abuse Confidence** | N/A |

| **Blacklist Count** | 0 |

| **Threat Feeds** | None |

| **ISP Reputation** | Low Risk |

| **Known Attacker** | No |

| **Tor Exit Node** | No |

**Threat Indicators:** None detected. No known campaigns, attacks, or malicious behavior.

\---

\## Network Behavior & Services

\- **Service Purpose:** Firewalled / No Services

\- **Open Ports:** None detected

\- **TLS Certificate:** None

\- **HTTP Service:** None

\- **Connection Type:** Mobile (LTE/5G)

\- **Carrier:** Vodafone GmbH (MCC: 262, MNC: 02)

**Network Role Classification:** Provider infrastructure with no public-facing services exposed.

\---

\## Neighborhood Analysis (92.209.215.0/24)

\- **Total Siblings:** 13

\- **Active Siblings:** 4

\- **Abuse Density:** 0.0769 (7.69%)

\- **Classification:** Mostly Clean

\- **Threat Siblings:** 1

\- **Risk Distribution:** High: 0, Medium: 0, Low: 12

**Notable Neighbors:**

\- 92.209.215.20: Risk 25 (Mobile carrier endpoint)

\- 92.209.215.55: Risk 25 (Mobile carrier endpoint)

\- 92.209.215.70, 92.209.215.82: Risk 0

\- 92.209.215.130, 92.209.215.193: Risk 25 (Mobile carrier endpoints)

\---

\## DNS Resolution

\- **PTR Hostname:** ipservice-092-209-215-021.092.209.pools.vodafone-ip.de

\- **Forward Resolution:** Confirmed

\- **Domain:** vodafone-ip.de

\- **Forward Hostname:** ipservice-092-209-215-021.092.209.pools.vodafone-ip.de

\---

\## Historical Observations

\- **Total Signals:** 18

\- **Last Observation:** 2026-07-22 22:27:53 UTC

\- **Ownership Changes:** 0

\- **Threat Persistence Days:** 0

\- **Persistently Malicious:** No

\- **Consistency:** Stable classification as "mostly_clean" over observation period

\---

\## Security Posture & Control Plane

\- **BGP Prefix:** 92.208.0.0/14

\- **RPKI State:** Not validated

\- **IRR Consistency:** Not validated

\- **Route Stability:** False (route changes in last 30 days: 0)

\- **DNSSEC Valid:** Yes

\- **DNSBL Listed:** 1 of 8 total lists

\- **Operator Score:** 0.2609 (Basic)

\---

\## Recommended Actions

**NO ACTION REQUIRED.**

This IP represents legitimate mobile carrier infrastructure with:

\- No open ports or services exposed

\- No threat indicators or malicious activity

\- Consistent historical behavior

\- Low-risk neighborhood characteristics

\- Standard mobile carrier IP allocation

**SOc Guidance:** Allow traffic as normal. No firewall rules or blocking recommended.

\---

\## References

\- **Abuse Contact:** Available via RDAP

\- **Abuse Email:** abuse.de@vodafone.com

\- **RIR:** RIPE NCC

\- **Mobile Carrier:** Vodafone GmbH

**End of Briefing**

## Nearby addresses

- 92.209.215.20 (https://ipdebrief.com/92.209.215.20)
- 92.209.215.40 (https://ipdebrief.com/92.209.215.40)
- 92.209.215.55 (https://ipdebrief.com/92.209.215.55)
- 92.209.215.70 (https://ipdebrief.com/92.209.215.70)
- 92.209.215.82 (https://ipdebrief.com/92.209.215.82)
- 92.209.215.93 (https://ipdebrief.com/92.209.215.93)
- 92.209.215.123 (https://ipdebrief.com/92.209.215.123)
- 92.209.215.130 (https://ipdebrief.com/92.209.215.130)
- 92.209.215.147 (https://ipdebrief.com/92.209.215.147)
- 92.209.215.193 (https://ipdebrief.com/92.209.215.193)
- 92.209.215.200 (https://ipdebrief.com/92.209.215.200)
- 92.209.215.221 (https://ipdebrief.com/92.209.215.221)

---

Source: IPDebrief, "92.209.215.21 IP intelligence", https://ipdebrief.com/92.209.215.21, updated 2026-10-06. Assessments are probabilistic.