95.91.252.65📋 Copy

# INTELLIGENCE BRIEFING: 95.91.252.65/32

Classification: LOW RISK

Date: Current

Analyst: IPDebrief Intelligence

---

## EXECUTIVE SUMMARY

IP address 95.91.252.65 is classified as low-risk with a risk score of 15/100. The address is associated with residential mobile infrastructure in Munich, Germany. No active threat indicators or malicious behavior observed. No automated security actions recommended at this time.

---

## PROFILE DATA

Ownership & Infrastructure:

• ASN: 3209 (Kabel Deutschland RIPE)
• Organization: KABEL-DEUTSCHLAND-CUSTOMER-SERVICES-19
• CIDR Block: 95.90.0.0/15
• RIR: RIPE
• Abuse Contact: Available via RDAP

Geolocation:

• Country: Germany (DE)
• Region: Bavaria
• City: Munich
• Coordinates: 51.17°N, 10.45°E
• Timezone: Europe/Berlin
• Geo Confidence: Consensus validated

Network Classification:

• Mobile Device: TRUE (Vodafone LTE/5G, MCC: 262, MNC: 02)
• Residential: FALSE
• ISP/Hosting/Cloud/Proxy: FALSE
• Tor Exit Node: FALSE
• Services: Firewalled / No Services Detected
• Open Ports: None

DNS Resolution:

• PTR Hostname: ip5f5bfc41.dynamic.kabel-deutschland.de
• Domain: kabel-deutschland.de
• Forward Resolution Confirmed: TRUE
• Email Authentication (SPF/DMARC): Not configured

---

## THREAT ASSESSMENT

Current Risk Indicators:

• Risk Score: 15 (Low)
• Abuse Confidence Score: Not available
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists
• Known Campaigns: None
• Threat Feeds: Clean

Control Plane:

• BGP Origin ASN: 3209
• BGP Prefix: 95.88.0.0/14
• Route Stability: Not stable
• RPKI State: Not evaluated
• DNSSEC Valid: TRUE

---

## OBSERVATION HISTORY

Total observations recorded: 18

Recent Signal Summary (2026-07-24):

• Subnet Classification: CLEAN
• Abuse Density: 0
• Inherited Risk: 0
• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: FALSE

Historical trend indicates stable, benign activity with no escalation in risk posture over the observation period.

---

## RELATIONSHIP ANALYSIS

Total relationships identified: 7

Relationship Types:

• DNS Associations: 5 entries pointing to ip5f5bfc41.dynamic.kabel-deutschland.de
• Network Associations: 2 entries within KABEL-DEUTSCHLAND-CUSTOMER-SERVICES-19

Campaign Correlation:

• Cert Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

No evidence of association with threat actors or coordinated campaigns.

---

## NEIGHBORHOOD ANALYSIS (95.91.252.0/24)

Subnet Overview:

• Total Neighbor IPs: 5
• Abuse Density: 0
• Subnet Classification: Not evaluated

Neighbor Risk Distribution:

Risk distribution: 0 high, 4 medium, 1 low risk. The target IP shares the same /24 subnet with 4 medium-risk neighbors and 1 low-risk neighbor.

---

## RECOMMENDED ACTIONS

No automated security actions or firewall rules generated. The IP presents low threat characteristics consistent with residential mobile infrastructure.

SOC Analyst Guidance:

• Monitor as part of normal baseline traffic
• No immediate blocking or filtering required
• Consider contextual correlation if unexpected traffic patterns emerge
• No escalation to threat hunting warranted at this time

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.