IP Intelligence Briefing: 84.159.219.229
*Generated via IPDebrief Threat Intelligence Platform*
---
**1. Core Profile**
- Risk Assessment:
- Overall Risk Score: 25 (Low Risk)
- Provider Score: 0 (No malicious provider association)
- Authority Score: 0 (Not a known authoritative node)
- Stability Score: 0 (Unstable network behavior detected)
- Ownership:
- ASN: 3320 (DTAG-NIC, Germany)
- Organization: Deutsche Telekom AG (mobile carrier)
- Geolocation:
- Country: Germany (DE)
- City: Wolgast (Mecklenburg-Vorpommern)
- Coordinates: 51.17°N, 10.45°E
- Accuracy Radius: 400 km
- Network Role:
- Mobile Device: LTE/5G (carrier: Telekom)
- Infrastructure: Firewalled / No Services
- Subnet: 84.159.219.229/24 (abuse density: 1/100)
---
**2. Threat Indicators**
- Malicious Activity:
- No indicators of spam, attacks, or known malicious campaigns.
- DNS: Resolves to `p549fdbe5.dip0.t-ipconnect.de` (T-IPConnect, Germany).
- Certificates: No TLS certificates or web services detected.
- Threat Feeds:
- Blacklist Count: 0
- Tor Exit: False
- Campaigns: No correlated malicious campaigns.
---
**3. Observation History**
- Temporal Trends:
- Last 30 days: 1 threat observation (geolocation inference).
- ICMP Validation: Blocked, preventing RTT/latency verification.
- Geolocation Consensus: Plausible (Germany) but inferred via multi-signal analysis.
---
**4. Network Relationships**
- DNS Associations:
- Linked to `p549fdbe5.dip0.t-ipconnect.de` (T-IPConnect).
- Network Peers:
- Same network (`DTAG-DIAL20`) with 0 active neighbors (subnet abuse density: 1%).
---
**5. Neighborhood Analysis**
- Subnet: 84.159.219.0/24
- Neighbor Count: 0 active IPs (likely due to low subnet activity).
- Risk Distribution: No high/medium-risk neighbors.
---
**6. Security Actions**
- Recommended Mitigations:
- Monitor for unexpected DNS changes or geolocation drift.
- Verify mobile device compliance with carrier policies (Deutsche Telekom).
- No firewall rules required for this IP (low risk).
---
Conclusion:
84.159.219.229 is a legitimate mobile LTE/5G device registered to Deutsche Telekom AG in Germany. No malicious activity or threats detected. The IPโs geolocation and DNS associations align with a residential/mobile network. SOC teams should monitor for anomalies in network behavior or unexpected service changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | DTAG-NIC |
| ASN | AS3320 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | RIPE |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | p549fdbe5.dip0.t-ipconnect.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | p549fdbe5.dip0.t-ipconnect.de |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 24% | 2 | 3 |
| reputation | 24% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 20% | 9 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-07 23:04:37 UTC |
| Last Seen | 2026-06-23 22:53:42 UTC |
| Profile Built | 2026-06-23 22:54:10 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.