# 92.209.219.101 — IP Intelligence Summary

92.209.219.101 is an IPv4 address operated by Vodafone Germany IP Core Backbone (AS3209), geolocated to Stuttgart, Germany. It belongs to a mobile network with reverse DNS name ipservice-092-209-219-101.092.209.pools.vodafone-ip.de. As of October 11, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/92.209.219.101
- Last updated: 2026-10-11

## Ownership

- Organization: Vodafone Germany IP Core Backbone
- Network name: VFDE-IP-SERVICE-01
- Allocated block: 92.208.0.0/15
- ASN: AS3209 (https://ipdebrief.com/asn/3209)
- Regional registry: RIPE

## Location

- City: Stuttgart
- Region: Baden-Wurttemberg
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ipservice-092-209-219-101.092.209.pools.vodafone-ip.de
- Forward-confirmed: yes

## Analyst narrative

\# IPDebrief Intelligence Briefing: 92.209.219.101/32

**Classification:** Low Risk | **Provider:** Vodafone Germany | **Location:** Stuttgart, Germany

\---

\## Executive Summary

IP address 92.209.219.101 belongs to Vodafone Germany's mobile carrier infrastructure (VFDE-IP-SERVICE-01, ASN: 3209). The address is classified as a mobile carrier endpoint with no open services and a risk score of 25. No active threat indicators were identified. The IP is part of a /24 subnet with 15% abuse density and 2 threat-identified siblings.

\---

\## Profile Analysis

**Risk Assessment:**

\- Overall Risk Score: 25 (Low Risk)

\- Infrastructure Type: Mobile Carrier (Vodafone LTE/5G network)

\- Country: Germany (DE)

\- Region: Baden-Württemberg, Stuttgart

\- RIR: RIPE

**Network Ownership:**

\- ASN: 3209 (Vodafone Germany IP Core Backbone)

\- Netname: VFDE-IP-SERVICE-01

\- CIDR Block: 92.208.0.0/15

\- Abuse Contact: abuse.de@vodafone.com

**Service Status:**

\- Open Ports: None detected

\- TLS/HTTP Services: None

\- Classification: Firewalled / No Services

\- Mobile Carrier: Vodafone GmbH (MCC: 262, MNC: 02)

\---

\## Threat Indicators

**Current Status:**

\- Known Attacker: No

\- Spam Source: No

\- Tor Exit Node: No

\- Proxy/VPN: No

\- Blacklist Count: 0

\- DNSBL Listed: 1 of 8 lists

**Control Plane:**

\- Route Stability: False (route changes observed)

\- DNSSEC: Valid

\- RPKI State: Not applicable

\- Operator Score: 0.2609 (Basic)

\---

\## Neighborhood Analysis (92.209.219.0/24)

**Subnet Characteristics:**

\- Total Siblings: 13

\- Active Siblings: 4

\- Abuse Density: 15.38%

\- Classification: Mostly Clean

\- Inherited Risk: 5

**Notable Neighbors:**

\- 92.209.219.156: Risk Score 50 (Medium)

\- 92.209.219.51, .101, .72, .84, .160, .231: Risk Score 25 (Low)

\- Remaining 11 siblings: Risk Score 0

\---

\## Relationship Graph

**DNS Associations:**

\- ipservice-092-209-219-101.092.209.pools.vodafone-ip.de

\- Domain: vodafone-ip.de

**Network Relationships:**

\- Same Network: VFDE-IP-SERVICE-01

\---

\## Historical Observations

**Signal Timeline (17 observations):**

\- Latest: 2026-07-25T04:01:02 UTC

\- Recent signals indicate consistent mobile carrier classification

\- Infrastructure type: Mobile Carrier (LTE/5G)

\- No significant behavioral changes observed

\- Subnet abuse density stable at 15.38%

**Temporal Indicators:**

\- Ownership Changes: 0

\- Threat Persistence Days: 0

\- Threat Observation Count: 0

\- Persistently Malicious: No

\---

\## Recommended Actions

**SOC Analysis:**

\- Monitor inbound traffic patterns for anomalies

\- Standard mobile carrier traffic classification applies

\- No immediate blocking recommended based on current risk profile

**Firewall Configuration:**

\- No specific firewall rules generated

\- Standard allow policies for mobile carrier infrastructure

**Threat Hunting:**

\- Focus on 92.209.219.156 (Risk Score 50) for enhanced monitoring

\- Review historical DNSBL listings for context

\---

**Generated:** 2026-07-25

**Data Sources:** IPDebrief Intelligence Platform

**Status:** Actionable Intelligence Ready

## Nearby addresses

- 92.209.219.37 (https://ipdebrief.com/92.209.219.37)
- 92.209.219.47 (https://ipdebrief.com/92.209.219.47)
- 92.209.219.51 (https://ipdebrief.com/92.209.219.51)
- 92.209.219.53 (https://ipdebrief.com/92.209.219.53)
- 92.209.219.60 (https://ipdebrief.com/92.209.219.60)
- 92.209.219.72 (https://ipdebrief.com/92.209.219.72)
- 92.209.219.80 (https://ipdebrief.com/92.209.219.80)
- 92.209.219.84 (https://ipdebrief.com/92.209.219.84)
- 92.209.219.150 (https://ipdebrief.com/92.209.219.150)
- 92.209.219.156 (https://ipdebrief.com/92.209.219.156)
- 92.209.219.160 (https://ipdebrief.com/92.209.219.160)
- 92.209.219.230 (https://ipdebrief.com/92.209.219.230)

---

Source: IPDebrief, "92.209.219.101 IP intelligence", https://ipdebrief.com/92.209.219.101, updated 2026-10-11. Assessments are probabilistic.