95.90.208.138📋 Copy

# IP INTELLIGENCE BRIEFING: 95.90.208.138

## EXECUTIVE SUMMARY

IP address 95.90.208.138 presents as a moderate-risk endpoint associated with Vodafone customer infrastructure in Germany. The IP is classified as mobile/residential with no active services or open ports. Current risk assessment scores 55 (Moderate Risk) with stable ownership characteristics and no evidence of persistent malicious activity.

## NETWORK OWNERSHIP & GEOGRAPHY

• ASN: 3209 (Kabel Deutschland RIPE)
• Organization: Kabel Deutschland RIPE
• Network Block: 95.90.0.0/15
• Location: Germany, Saxony, Leipzig
• Coordinates: 51.17°N, 10.45°E
• Abuse Contact: abuse.de@vodafone.com
• RIR: RIPE

## CLASSIFICATION PROFILE

• Connection Type: Mobile (Vodafone LTE/5G, MCC: 262, MNC: 02)
• Service Status: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: ip5f5ad08a.dynamic.kabel-deutschland.de
• PTR Record: Forward confirmed

## THREAT INDICATORS

• Risk Score: 55 (Moderate Risk)
• Blacklist Count: 0
• Known Campaigns: None identified
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False
• DNSBL Listings: 3 out of 8 total lists
• Operator Score: 0.2609 (Basic)
• Abuse Confidence Score: Not available

## TEMPORAL ANALYSIS

• Ownership Stability: 0 changes detected
• Threat Persistence: 0 days observed
• Threat Observation Count: 0
• Persistently Malicious: False
• Observation Count: 16 signals recorded
• Recent Activity: Observed on 2026-07-23 across multiple signal types

## NETWORK NEIGHBORHOOD ASSESSMENT

• Subnet: 95.90.208.138/24
• Abuse Density: 0
• Active Siblings: 2
• Neighbor Risk Profile:

- 95.90.208.23: Risk Score 55, Authority Score 60

- 95.90.208.83: Risk Score 40, Authority Score 60

• High-Risk Neighbors: 0
• Overall Threat Siblings: 0

## RELATIONSHIP GRAPH

• DNS Associations: ip5f5ad08a.dynamic.kabel-deutschland.de (dynamic hostname)
• Network Affiliation: KABEL-DEUTSCHLAND-CUSTOMER-SERVICES-19
• Related Entities: 5 total relationships identified

## RECOMMENDED ACTIONS

• Classification: No immediate blocking required
• Monitoring: Standard logging recommended due to mobile/residential classification
• Firewall Rules: No specific firewall recommendations generated
• WAF Rules: No WAF recommendations applicable

## INTELLIGENCE ASSESSMENT

The IP address 95.90.208.138 represents a Vodafone customer endpoint in Germany with stable network characteristics. The moderate risk score reflects the mobile/residential classification rather than malicious activity indicators. No threat indicators, campaign associations, or persistent malicious behavior were detected. The neighborhood assessment shows low abuse density with no high-risk neighbors. SOC teams may classify this as low-priority traffic requiring standard logging but not immediate blocking or escalation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.