89.145.11.228📋 Copy

# IP Intelligence Briefing: 89.145.11.228/32

## Executive Summary

IP address 89.145.11.228 is classified as Low Risk with a risk score of 0. The address is associated with a residential ISP network (TELTA) in Eberswalde, Brandenburg, Germany. No malicious indicators, blacklists, or threat activity have been observed. The IP exhibits characteristics of a dynamic PPPoE residential connection.

---

## Technical Profile

Ownership & Classification

• ASN: 21032
• Organization: Bjoern Moldenhauer
• Network: TELTA-DYNAMIC-BROADBAND-NETWORK-1 (89.145.0.0/19)
• RIR: RIPE
• Type: Dynamic Residential ISP Network

Geolocation

• Country: DE (Germany)
• Region: Brandenburg
• City: Eberswalde
• Coordinates: 51.17°N, 10.45°E
• Accuracy Radius: 400 km
• Geo Validation: Plausible (ICMP blocked during validation)

Network Services

• Open Ports: None detected
• DNS PTR: pppoe-dynamic-89-145-11-228.telta.net
• Forward Resolution: Confirmed (telta.net domain)
• Hosting/Proxy/CDN: No indicators detected
• Tor/Exit Node: Not a Tor exit

---

## Threat Indicators

Current Threat Status: CLEAN

• Abuse Confidence Score: Not applicable (no abuse signals)
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None detected
• Threat Feeds: No matches

Control Plane Data

• BGP Prefix: 89.145.0.0/18
• Route Stability: Unstable
• DNSBL Listings: 0 of 8 potential lists
• RPKI State: Not evaluated
• Operator Score: 0.2609 (Basic)

---

## Neighborhood Analysis

Subnet: 89.145.11.228/24

• Abuse Density: 0 (no abuse signals in /24)
• Threat Siblings: 0
• Active Siblings: 0
• Classification: Clean
• Risk Distribution: No high/medium/low risk neighbors detected

---

## Observation History

Total Observations: 19 signals recorded

Recent Activity (2026-07-27):

• Subnet Classification: Clean
• Abuse Density: 0
• Geo Inference: Eberswalde, DE (confidence: 0.52)
• Traceroute: 30 hops completed (target reached)
• Ownership Changes: 0 (stable assignment)
• Threat Persistence: Not persistent

Temporal Indicators:

• No persistent malicious activity detected
• No ownership changes observed
• Threat observation count: 0

---

## Relationships

• Network Association: TELTA-DYNAMIC-BROADBAND-NETWORK-1 (multiple instances)
• DNS Associations: pppoe-dynamic-89-145-11-228.telta.net (dynamic PPPoE hostname)
• No cross-IP threat correlations identified

---

## Recommended Actions

Firewall/Security Rules: No blocking recommended

Rationale:

• IP exhibits residential ISP characteristics
• No malicious indicators or threat signals
• Clean reputation across all threat feeds
• No abuse density in associated subnet
• Standard dynamic residential connection with no anomalous behavior

---

## SOC Analyst Notes

This IP represents a typical residential broadband connection from TELTA Germany. The dynamic PPPoE hostname and clean threat profile indicate legitimate end-user usage. No immediate defensive action required. Monitor for any future threat signal emergence, though current data shows no evidence of abuse or malicious activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.