62.153.188.66
Intelligence analysts identified IP 62.153.188.66/32 as a mobile endpoint associated with Deutsche Telekom AG (ASN 3320) within the DTAG-BB16 network block. Observations placed the address in Sinzig, Rheinland-Pfalz, Germany, with geolocation consensus across multiple providers. Technical analysis confirmed the resource operated over LTE/5G technology without open ports or active services. DNS resolution yielded a PTR hostname of b-eh2-i.B.DE.NET.DTAG.DE with forward confirmation, though SPF records were absent while DMARC was present.
Threat assessments categorized the host as low risk with a score of 25. Despite a profile tag designating it as a suspicious host, the address lacked specific threat indicators, known campaigns, or persistence. The endpoint registered on one DNS blacklist out of eight scanned lists. The immediate /24 neighborhood remained mostly clean with an abuse density of 0.0833. Behavioral metrics recorded zero incidents, honeypot hits, or WAF violations. Recommendations classify the activity as monitor with low severity due to the clean neighborhood context. Data freshness confirms live observations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DTAG-NIC |
| ASN | AS3320 |
| Network Name | DTAG-BB16 |
| CIDR Block | 62.153.176.0/20 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | b-eh2-i.B.DE.NET.DTAG.DE |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | b-eh2-i.B.DE.NET.DTAG.DE |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 32% | 1 | 5 |
| geolocation | 37% | 2 | 6 |
| Overall | 28% | 10 | 22 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-03 13:22:05 UTC |
| Last Seen | 2026-09-19 05:58:25 UTC |
| Profile Built | 2026-09-19 06:36:01 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 38 |
Full dossier details are available via our API.