91.2.38.149📋 Copy

IP Intelligence Briefing: 91.2.38.149

Date: 2026-06-11

---

**1. Core Profile**

• Risk Score: Low Risk (25/100)
• Ownership:

- ASN: 3320 (DTAG-NIC, Deutsche Telekom AG)

- Subnet: 91.0.0.0/10

- Geolocation: Registered to Germany (DE), but geolocated in New York, USA (potential misattribution).

• Network Role: Mobile residential connection (MCC 262, MNC 01, LTE/5G).
• Threat Indicators: No known malicious activity, no spam, no attacker campaigns.

---

**2. Observation History**

• Latest Signals (30 Days):

- Clean subnet (91.2.38.149/24) with 0 abuse density.

- 1 DNSBL listing (1/8 total lists) with medium confidence.

- Stable ASN (3320) and DNS records (t-ipconnect.de).

• Trend: No persistent threats or network instability.

---

**3. Relationships**

• Network Associations:

- Linked to subnet DTAG-DIAL22 (Deutsche Telekom).

- DNS hostname: p5b022695.dip0.t-ipconnect.de (residential/mobile ISP).

• No Known Malicious Relationships: No connections to known attackers, C2 servers, or botnets.

---

**4. Neighborhood Analysis**

• Subnet: 91.2.38.149/24
• Neighbor Density: 0 abuse incidents in subnet (clean classification).
• Isolation: No active or threat-related sibling IPs detected.

---

**5. Recommendations**

• Monitoring: Track DNSBL status and verify geolocation accuracy (potential spoofing).
• Firewall: No immediate blocking required; monitor for anomalies.
• Context: Residential/mobile IP with no malicious signals, but DNSBL listing warrants further investigation.

Final Assessment: Low-risk residential/mobile IP with no active threats. No action required unless DNSBL status changes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.