149.233.218.198
## INTELLIGENCE BRIEFING: 149.233.218.198
Classification: Residential Customer Endpoint
Risk Assessment: LOW (Score: 0/10)
Date: 2026-07-18
---
EXECUTIVE SUMMARY
IP 149.233.218.198 is a residential PPPoE customer endpoint operated by Wilhelm.tel GmbH. The address shows no malicious activity, no blacklist associations, and no open services. Profile indicates legitimate residential usage within German telecommunications infrastructure.
---
OWNERSHIP & INFRASTRUCTURE
- ASN: 15943 (wilhelm.tel gmbh)
- Organization: NORDERSTEDT-MNT (Wilhelm.tel GmbH)
- Network: WT-PPPOE-PRIVATE-CUSTOMER-NET (149.233.192.0/19)
- RIR: ARIN
- Location: Hamburg, Germany (HH)
- Abuse Contact: abuse@wilhelm-tel.de
- Classification: Residential PPPoE customer
GEOLOCATION
- Country: Germany (DE)
- Region: Hamburg (HH)
- City: Hamburg/Norderstedt area
- Timezone: Europe/Berlin
- Geo Consensus: Validated across multiple sources
THREAT INDICATORS
- Risk Score: 0
- Abuse Confidence Score: Not applicable (no threats)
- Blacklist Count: 0
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- DNSBL Listings: 0/8
NETWORK BEHAVIOR
- Open Ports: None detected
- Services: Firewalled / No Services
- DNS Records:
- PTR: 149.233.218.198.dynamic-pppoe.dt.ipv4.wtnet.de
- Forward Resolution: Confirmed
- Domain: wtnet.de
- TLS/HTTP: No active services
- BGP Stability: Stable (0 route changes in 30 days)
OBSERVATION HISTORY
Total signals observed: 15
- Consistent Geolocation: Germany (Hamburg area) across all observations
- Ownership: Consistent with Wilhelm.tel ASN 15943
- Network Classification: Residential PPPoE maintained throughout observation period
- Recent Activity: No threat signals detected in most recent observations
RELATIONSHIPS
- DNS Associations: Dynamic PPPoE hostname (149.233.218.198.dynamic-pppoe.dt.ipv4.wtnet.de)
- Network Association: WT-PPPOE-PRIVATE-CUSTOMER-NET
- Related Entities: None (no organizational or certificate relationships)
SUBNET ANALYSIS
- Subnet: 149.233.218.0/24
- Abuse Density: 0%
- Active Siblings: 0
- Threat Siblings: 0
- Classification: Clean residential subnet
RECOMMENDED ACTIONS
No blocking or filtering recommended. This IP represents legitimate residential infrastructure. No firewall rules required. Monitor for behavioral changes if this address appears in threat contexts not reflected in current profile.
---
Analysis Notes: Profile indicates this is a residential customer IP address from a German telecommunications provider. The absence of services, threat indicators, and blacklist associations supports classification as low-risk residential infrastructure.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | NORDERSTEDT-MNT |
| ASN | AS15943 |
| Network Name | WT-PPPOE-PRIVATE-CUSTOMER-NET |
| CIDR Block | 149.233.192.0/19 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 149.233.218.198.dynamic-pppoe.dt.ipv4.wtnet.de |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 149.233.218.198.dynamic-pppoe.dt.ipv4.wtnet.de |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS15943 |
| Network Prefix | 149.233.128.0/17 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 23% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 28% | 2 | 4 |
| Overall | 19% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-08 08:02:02 UTC |
| Last Seen | 2026-09-13 21:01:36 UTC |
| Profile Built | 2026-09-13 21:10:02 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 149.233.218.198
Who owns the IP address 149.233.218.198?
149.233.218.198 is registered to NORDERSTEDT-MNT. The address falls within the 149.233.192.0/19 network block. Registration is held at ARIN.
Where is 149.233.218.198 located?
Geolocation data places 149.233.218.198 in Hamburg, Free and Hanseatic City of Hamburg, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 149.233.218.198 malicious or safe?
149.233.218.198 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 149.233.218.198?
The reverse DNS (PTR) record for 149.233.218.198 is 149.233.218.198.dynamic-pppoe.dt.ipv4.wtnet.de. This hostname is forward-confirmed, meaning it resolves back to the same address.