# 95.91.248.200 — IP Intelligence Summary

95.91.248.200 is an IPv4 address operated by Kabel Deutschland RIPE (AS3209), geolocated to Munich, Germany. It belongs to a mobile network with reverse DNS name ip5f5bf8c8.dynamic.kabel-deutschland.de. As of October 7, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/95.91.248.200
- Last updated: 2026-10-07

## Ownership

- Organization: Kabel Deutschland RIPE
- Network name: KABEL-DEUTSCHLAND-CUSTOMER-SERVICES-19
- Allocated block: 95.90.0.0/15
- ASN: AS3209 (https://ipdebrief.com/asn/3209)
- Regional registry: RIPE

## Location

- City: Munich
- Region: Bavaria
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ip5f5bf8c8.dynamic.kabel-deutschland.de
- Forward-confirmed: yes

## Analyst narrative

**Intelligence Briefing: IP 95.91.248.200/32**

**Target Identification**

The IP address 95.91.248.200 was identified as a Moderate Risk address with a risk score of 40. The address resides within the 95.90.0.0/15 block registered to Kabel Deutschland RIPE (ASN 3209) under the netname KABEL-DEUTSCHLAND-CUSTOMER-SERVICES-19.

**Geolocation and Network Role**

Geolocation consensus data placed the host in Munich, Bavaria, Germany. Connection analysis identified the address as a mobile endpoint associated with Vodafone GmbH LTE/5G technology. DNS resolution confirmed forward resolution to ip5f5bf8c8.dynamic.kabel-deutschland.de.

**Threat Posture**

Threat intelligence queries returned no known attacker indicators, blacklist entries, or active campaign associations. The address was not flagged as a spam source, Tor exit node, or proxy service. Despite the moderate risk score, the address showed no evidence of immediate malicious activity in current scans.

**Network State**

Service scanning detected no open ports, TLS certificates, or active web banners. The service purpose was noted as Firewalled / No Services.

**Analysis and Recommendations**

SOC analysts should monitor the address for correlation with active threats. While the risk score is elevated, the lack of open services and active threat indicators suggests limited immediate exploitation potential.

## Nearby addresses

- 95.91.248.50 (https://ipdebrief.com/95.91.248.50)
- 95.91.248.191 (https://ipdebrief.com/95.91.248.191)
- 95.91.248.204 (https://ipdebrief.com/95.91.248.204)
- 95.91.248.207 (https://ipdebrief.com/95.91.248.207)

---

Source: IPDebrief, "95.91.248.200 IP intelligence", https://ipdebrief.com/95.91.248.200, updated 2026-10-07. Assessments are probabilistic.