Elevated Risk
Elevated threat level 7/10 for IP 92.209.154.156 from 1 reported incidents.
Behavioral profile indicates cyber threat activity with 24% confidence.
More threatening than 79% of monitored IPs
IP Address
92.209.154.156
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Germany
Location
Vodafone GmbH
ASN 3209
1
Reports
Honeypot
Data Source
Threat Categories
Web App Attack
1
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
22. September 2026
Last Activity
22. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 3209, operated by Vodafone GmbH) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
24%
Low Confidence
Security Reports (1)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 92.209.154.156
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS3209
- ISP
- Vodafone GmbH
DNS Information
- Reverse DNS
- ipservice-092-209-154-156.092.209.pools.vodafone-ip.de
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 1
- First Reported
- 22 Sep 2026
- Last Reported
- 22 Sep 2026, 06:30
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS3209
Vodafone GmbH
DE
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
55
Total IPs Monitored
635
Total Reports
11.5
Reports per IP
Network Context
This IP address belongs to Vodafone GmbH (AS3209), which manages 55 IP addresses in our monitoring system. Out of these, 635 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 837,592 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
1
avg: 9
--
Network Comparison
Compared against 947 IPs in ASN 3209
Threat Level
7/10
network avg: 6.5
=
Total Reports
1
network avg: 3
--
Network Vodafone GmbH has overall threat level 4/10
Geographic Comparison
Compared against 18,537 IPs in DE
Threat Level
7/10
country avg: 7.3
=
Total Reports
1
country avg: 30
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
22 Sep 2026
1 reports
Daily Average
0
reports/day
Most Active
Tuesday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
761,420 threat incidents tracked globally • Last 24h: 30,396 Logs
FEED
Top Threat Sources
-
01
United States149,019 19.6% -
02
Brazil112,085 14.7%
-
03
India88,119 11.6%
-
04
China46,236 6.1%
-
05
SC29,255 3.8%
-
06
Germany18,538 2.4%
-
07
Netherlands18,093 2.4%
-
08
Pakistan18,015 2.4%
-
09
Argentina16,331 2.1%
-
10
Colombia15,196 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
73%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
2a02:8071:2281:8240:7b8f:4890:5852:7ff5
8/10
Confidence
98%
Reports
19
Location
DE
DE
78.94.185.253
10/10
Confidence
96%
Reports
17
Location
DE
DE
77.25.37.44
10/10
Confidence
94%
Reports
165
Location
DE
DE
85.216.81.75
10/10
Confidence
92%
Reports
18
Location
DE
DE
5.146.111.129
8/10
Confidence
91%
Reports
31
Location
DE
DE
92.208.231.194
8/10
Confidence
88%
Reports
10
Location
DE
DE
109.91.4.177
10/10
Confidence
87%
Reports
179
Location
DE
DE
95.90.13.168
10/10
Confidence
86%
Reports
219
Location
DE
DE
178.27.90.142
10/10
Confidence
83%
Reports
151
Location
DE
DE
37.5.254.140
10/10
Confidence
73%
Reports
9
Location
DE
DE
2a00:1e:ab01:f501:3854:f4cb:8ee1:67b2
10/10
Confidence
68%
Reports
8
Location
DE
DE
92.208.103.81
8/10
Confidence
67%
Reports
8
Location
DE
DE
31.18.248.188
10/10
Confidence
63%
Reports
7
Location
DE
DE
92.218.123.85
8/10
Confidence
59%
Reports
12
Location
DE
DE
2a02:8071:2281:8240:246e:aaf6:b8e8:4951
8/10
Confidence
59%
Reports
4
Location
DE
DE
24.134.9.233
10/10
Confidence
56%
Reports
8
Location
DE
DE
2a02:908:195:2820:3dbd:ac7a:e38d:6d68
10/10
Confidence
51%
Reports
4
Location
DE
DE
92.208.239.80
10/10
Confidence
51%
Reports
4
Location
DE
DE
2a02:908:196:260:10ea:859:ee41:dc9e
8/10
Confidence
50%
Reports
4
Location
DE
DE
92.208.239.49
8/10
Confidence
49%
Reports
4
Location
DE
DE
IPs from the same subnet range, likely same network segment.
2
Related IPs
6/10
Avg Threat
16%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,062
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
193.24.211.218
10/10
Confidence
100%
Reports
126
ISP
Data Campus Lim...
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
2a0f:ca80:b00b:8089::5
8/10
Confidence
100%
Reports
48
ISP
TechTies Inc.
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
35.234.68.116
10/10
Confidence
100%
Reports
38
ISP
Google LLC
34.159.0.93
8/10
Confidence
100%
Reports
37
ISP
Google LLC
34.185.254.148
8/10
Confidence
100%
Reports
27
ISP
Google LLC
167.172.176.118
10/10
Confidence
100%
Reports
23
ISP
DigitalOcean, LLC
151.243.113.84
8/10
Confidence
100%
Reports
18
ISP
Dedik Services ...
45.140.42.24
10/10
Confidence
100%
Reports
16
ISP
Clouvider Limited
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
50.7.86.141
8/10
Confidence
100%
Reports
14
ISP
FDCservers.net
IPs with similar threat level and confidence scores.
15
Related IPs
6/10
Avg Threat
24%
Avg Confidence
81.56.138.17
6/10
Confidence
24%
Reports
1
154.160.2.16
6/10
Confidence
24%
Reports
1
170.254.172.185
6/10
Confidence
24%
Reports
1
46.213.13.14
6/10
Confidence
24%
Reports
1
79.20.249.14
6/10
Confidence
24%
Reports
1
24.42.116.67
6/10
Confidence
24%
Reports
1
Location
PS
PS
2401:4900:8823:89e6:9897:54fc:4623:6add
6/10
Confidence
24%
Reports
1
39.48.3.246
6/10
Confidence
24%
Reports
1
109.107.227.120
6/10
Confidence
24%
Reports
1
116.90.103.209
6/10
Confidence
24%
Reports
1
201.33.83.76
6/10
Confidence
24%
Reports
1
149.62.208.154
6/10
Confidence
24%
Reports
1
81.57.9.98
6/10
Confidence
24%
Reports
1
196.177.155.50
6/10
Confidence
24%
Reports
1
2605:a144:2361:7736::1
6/10
Confidence
24%
Reports
1