92.211.28.230
IP Intelligence Briefing: 92.211.28.230
Date: 2026-06-09
---
**1. Core Profile**
- Risk Score: Moderate (50/100)
- Provider: Vodafone Germany (AS3209)
- Geolocation: Hanover, Lower Saxony, Germany (51.17°N, 10.45°E)
- Network Role: Mobile carrier (LTE/5G)
- Threat Indicators: No malicious activity detected (no known campaigns, spam, or blacklist entries).
---
**2. Observation History**
- Recent Activity (2026-06-09):
- High-severity DNS listings (confidence: 85%) linked to Vodafone’s infrastructure.
- Geolocation validation inferred via multi-signal analysis (accuracy: ~400km).
- Network stability: Route stability score (0.26), indicating potential instability.
---
**3. Relationships**
- DNS Associations:
- Resolves to `ipservice-092-211-028-230.092.211.pools.vodafone-ip.de`.
- Network Connections:
- Same subnet (`92.211.28.0/24`) with 5 sibling IPs.
- No direct links to known malicious entities or campaigns.
---
**4. Neighborhood Analysis**
- Subnet Abuse Density: 0% (clean).
- Neighbor Risk Scores:
- 1 IP with moderate risk (50), 4 with low risk (0–25).
- No high-risk neighbors.
---
**5. Recommendations**
- Monitor: Track DNS and network activity for anomalies, given moderate risk score and route instability.
- Verify Geolocation: Confirm geo-plausibility via additional probes, as inferred location may lack precision.
- Network Segmentation: Ensure isolation of mobile carrier traffic to prevent lateral movement risks.
Conclusion: This IP is part of Vodafone’s mobile network with no current malicious indicators. However, its moderate risk score and route instability warrant closer monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Vodafone Germany IP Core Backbone |
| ASN | AS3209 |
| Network Name | — |
| CIDR Block | — |
| RIR | RIPE |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ipservice-092-211-028-230.092.211.pools.vodafone-ip.de |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ipservice-092-211-028-230.092.211.pools.vodafone-ip.de |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 2 | 2 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 13% | 1 | 1 |
| Overall | 16% | 8 | 9 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-21 14:58:37 UTC |
| Last Seen | 2026-06-09 12:58:41 UTC |
| Profile Built | 2026-06-09 13:14:57 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.