ASN Profile

🌐 AS3320 — DTAG Deutsche Telekom AG

RIR n/a · DE · reputation 14.7 (LOW)

Malicious IPs (local)

1
0 high-severity

Reputation

14.7
LOW

Malware families

0
hosted

Countries spanned

1
geo footprint

Announced prefixes

0
0 v4 / 0 v6

Abuse contact

—
run resolver
🔄 Pivot:🌐 AS3320🏢 Deutsche Telekom🌎 DE📁 Dark Web
PIVOT🌐 ASN Profile🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

🏷 Registration & Abuse

ASNAS3320
Holder / OrgDeutsche Telekom 🏢 Parent-org rollup
RIR—
CountryDE
Local netblocks0
Abuse contact— Resolve contacts
All contacts—

🔥 Threat severity

High (.5–.75)
1
Avg threat 0.5 · peak 0.5

🦠 Top malware families hosted

No data.

🏹 Threat actors hosted

No data.

🌎 Geographic spread

🏷 Tags in this ASN

No data.

📁 Categories

📅 First-seen timeline

2026-08
1

🧭 /24 Subnet Concentration (pattern analysis)

No multi-IP subnet clusters.

📊 Data Completeness & Gaps

Geolocation
100%
Category
100%
First-seen date
100%
Last-seen date
100%
Observed 2026-08-06 19:47:49 → 2026-08-06 19:47:49 · enrichment shown for 1/1 displayed

Gaps drive backfill: run resolve-all (geo/ASN), enrich-local, auto-tag.

🔥 Malicious IPs in AS3320 (1 total, 1 shown)

⇩ Export ALL 1 (CSV, all sources)

Every displayed IP carries its sightings, contributing sources, tags and enrichment inline. The CSV export contains the complete set with all fields.

IPThreatSightingsSourcesFamily / ActorCategoryTagsEnrichmentCountryFirst seenLast seen
93.220.96.221 0.50 1 dan.me.uk Tor node list (1) — Dark Web — ipinfo DE 2026-08-06 19:47:49 2026-08-06 19:47:49

🔍 OSINT pivots — external lookups

bgp.he.net →bgp.tools →RIPEstat →BGPView →PeeringDB →CAIDA ASRank →Spamhaus ASN-DROP →Shodan →Censys →GreyNoise →AbuseIPDB →Hurricane whois →robtex →

🔗 Internal pivots & analysis

ASN Analysis →Correlation graph →Infra lookup →Link analysis →Passive DNS →Worst Offenders →Search this ASN →

⚡ Response & automation

☠ Bulk takedown →Takedown ops →Playbooks →Playbook library →AI skills →Run fusion →Mission command →Add to case →Watch this ASN →Create alert rule →

📤 Share & export

CSV (all IPs + sources) →STIX 2.1 →MISP →Palo Alto EDL →Snort/Suricata →Detection rules →
Identity resolves local-first (asn_contacts + ip_ranges + indicators) so the dossier is complete even offline; registration / prefixes / peers augment live via RIPEstat & BGPView (cached). Reputation blends malicious-IP volume, average & peak threat, distinct malware families, geographic spread and sanctioned presence.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center