87.133.88.170📋 Copy

# IP Intelligence Briefing: 87.133.88.170/32

## Executive Summary

Risk Level: Low | Classification: Residential Mobile Connection | Geolocation: Germany

IP 87.133.88.170 is a residential mobile connection from Deutsche Telekom AG with an overall risk score of 25 (Low Risk). The IP is currently not flagged as an active threat source, though historical data indicates prior blacklist associations.

---

## Ownership & Geolocation

• ASN: 3320 (DTAG-NIC / Deutsche Telekom AG)
• Organization: DTAG-NIC
• Country: Germany (DE)
• Region: Lower Saxony
• City: Wennigsen (Deister)
• Registration RIR: RIPE
• BGP Prefix: 87.128.0.0/10
• Mobile Carrier: Telekom (Deutsche Telekom AG), MCC: 262, MNC: 01 (LTE/5G)

---

## Network Classification

• Type: Residential Mobile (isMobile: true)
• Infrastructure: Not cloud, CDN, VPN, proxy, or hosting
• Service Status: Firewalled / No Services
• DNS Resolution: Confirmed forward resolution to p578558aa.dip0.t-ipconnect.de
• PTR Record: p578558aa.dip0.t-ipconnect.de
• DNSSEC: Valid

---

## Threat Assessment

Current Risk Indicators: None

• Blacklist Count: 0
• Abuse Confidence Score: Not available
• Tor Exit: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None detected

Control Plane Metrics:

• Operator Score: 0.2609 (Basic)
• Route Stability: False
• DNSBL Listed: 0
• Total DNSBL Lists: 8 (historical)

---

## Neighborhood Analysis (87.133.88.0/24)

• Subnet Classification: Clean
• Abuse Density: 0 (0% of neighbors flagged)
• Risk Distribution: No high/medium/low risk neighbors detected
• Active Siblings: 1
• Threat Siblings: 0

---

## Historical Observations

Total Signal Observations: 19

Notable Historical Findings:

• One observation (2026-06-05 11:19:41 UTC) indicated the IP was listed on 8 blacklist entries with maximum severity rating of "high"
• Subsequent observations show subnet abuse density normalized to 0
• Network classification remains stable as residential mobile

Temporal Indicators:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: False

---

## Relationship Graph

• DNS Associations: p578558aa.dip0.t-ipconnect.de (multiple entries)
• Network Associations: DTAG-DIAL100 (multiple entries)
• Total Relationships: 30 (predominantly DNS and network associations)

---

## Recommended Actions

No specific firewall rules or blocking actions recommended at this time. The IP demonstrates low-risk characteristics consistent with residential mobile broadband usage.

Suggested Monitoring:

• Monitor for emergence of open service ports
• Watch for changes in network classification
• Review blacklist status periodically given historical associations

---

Analysis Date: 2026-06-05

Data Sources: IPDebrief Intelligence Platform

Classification: Defensive Security Intelligence

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.