IP Intelligence Briefing: 92.76.158.74
Date: 2026-06-08
**Key Findings**
- Risk Profile: Moderate risk (40/100) with no direct threat indicators (no malware, phishing, or spam associations).
- Ownership: Owned by Vodafone Germany IP Core Backbone (ASN 3209), registered to Vodafone GmbH.
- Geolocation: Germany (Baden-Württemberg, Baltmannsweiler), latitude 48.74, longitude 9.45.
- Network Role: Mobile carrier infrastructure (LTE/5G), no cloud/Cdn/VPN services.
- DNS: Resolves to `dslb-092-076-158-074.092.076.pools.vodafone-ip.de` with SPF validation.
- Threat Indicators: No abuse confidence score, not listed in DNSBLs, no known attacker campaigns.
- Subnet: Isolated /24 subnet (92.76.158.0/24) with no neighboring IPs flagged for abuse.
**Observation History**
- Recent Activity: Last observed June 7, 2026, with BGP prefix 92.72.0.0/13.
- Stability: No ownership changes; stable network routing.
- DNSBL Listings: 2 out of 8 DNSBL checks (low severity).
**Recommendations**
1. Monitor: Track for unexpected DNS changes or new threat indicators.
2. Verify: Confirm if the moderate risk score aligns with internal threat models.
3. Network Segmentation: Ensure isolation of mobile carrier infrastructure from sensitive systems.
Conclusion: Legitimate Vodafone IP with no malicious activity detected. The moderate risk score may reflect ambiguous geolocation data or low-severity DNSBL flags. No immediate action required, but ongoing monitoring is advised.
Source: IPDebrief Threat Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Vodafone Germany IP Core Backbone |
| ASN | AS3209 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | RIPE |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | dslb-092-076-158-074.092.076.pools.vodafone-ip.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | dslb-092-076-158-074.092.076.pools.vodafone-ip.de |
๐ DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 19% | 1 | 2 |
| services | 13% | 1 | 1 |
| ownership | 30% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 13% | 1 | 1 |
| Overall | 17% | 7 | 9 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-15 08:45:06 UTC |
| Last Seen | 2026-06-07 13:09:51 UTC |
| Profile Built | 2026-06-07 13:12:44 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.