94.72.188.22📋 Copy

# THREAT INTELLIGENCE BRIEFING

Target IP: 94.72.188.22/32

Classification: LOW RISK / RESIDENTIAL

Date: 2026-07-28

Analyst: IPDebrief Intelligence

---

## EXECUTIVE SUMMARY

IP 94.72.188.22 is a low-risk residential endpoint operated by Deutsche Telekom under NORDERSTEDT-MNT. The IP belongs to a PPPoE customer assignment in Hamburg, Germany (94.72.188.0/22). No malicious activity, threat indicators, or abuse reports have been detected. The subnet shows zero abuse density.

---

## RISK ASSESSMENT

---

## NETWORK IDENTIFICATION

---

## NETWORK ROLE & INFRASTRUCTURE

• Service Type: Residential PPPoE Endpoint
• Connection Type: Dynamic PPPoE (94.72.188.22.dynamic-pppoe.dt.ipv4.wtnet.de)
• Hosting/CDN: No
• Tor/Proxy: No
• Vulnerability: Firewalled / No Services
• Open Ports: None detected

---

## THREAT INTELLIGENCE

Known Indicators

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Association: None detected
• Malware Campaigns: 0 matches

Reputation Sources

• No reputation sources flagged
• No threat feed matches
• No known campaigns correlated

---

## OBSERVATION HISTORY (22 Signals)

Recent monitoring activity shows standard residential endpoint behavior:

• Geolocation Signals: Consistent DE/Hamburg location with 52% confidence; distance from origin ~258km, average RTT ~102ms
• Port Scans: Standard network probing detected with no service exposure
• Banner Analysis: No service banners or certificates detected
• Threat Persistence: 0 days of persistent malicious activity
• Ownership Changes: 0 changes recorded

Trend Assessment: Static, benign residential endpoint with no escalation in risk profile.

---

## RELATIONSHIP ANALYSIS (12 Relationships)

• DNS Associations: All point to dynamic PPPoE hostname pattern (94.72.188.22.dynamic-pppoe.dt.ipv4.wtnet.de)
• Network Relationships: All mapped to WT-PPPOE_PRIVATE-CUSTOMER network
• External Relationships: None detected (no hosting, CDN, campaign, or certificate associations)

---

## NEIGHBORHOOD ANALYSIS (94.72.188.0/24)

The /24 subnet shows no abuse or threat indicators.

---

## CONTROL PLANE DATA

• Origin ASN: 15943
• BGP Prefix: 94.72.184.0/21
• Route Stability: Unstable (isRouteStable: false)
• RPKI State: Not assessed
• IRR Consistency: Not assessed
• DNSSEC: Valid
• DNSBL Listings: 0 of 8 total

---

## RECOMMENDED ACTIONS

---

## CONCLUSION

94.72.188.22 is a benign residential PPPoE endpoint in Hamburg, Germany. The IP shows no malicious behavior, threat associations, or abuse indicators. The subnet demonstrates zero abuse density. SOC teams may treat traffic from this IP as low-risk with standard monitoring procedures. No blocking or filtering actions are recommended.

---

Report Generated: 2026-07-28

Data Source: IPDebrief Intelligence Platform

Classification: Internal Use

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.