89.163.214.187📋 Copy

# IP Intelligence Briefing: 89.163.214.187/32

Classification: LOW RISK / ROUTINE MONITORING

Date: Current

Analysis: IPDebrief Automated Intelligence

## Executive Summary

IP 89.163.214.187 is a low-risk endpoint associated with WIIT AG NOC infrastructure in Germany. No malicious indicators detected. The IP resolves to a virtual server hostname (vps2649305.fastwebserver.de) with no active services exposed. Recommended for routine monitoring with no immediate blocking action required.

## Infrastructure Profile

## Network Classification

• Infrastructure Type: VPS/Residential Hosting
• Network Role: Firewalled / No Services
• Cloud/CDN/VPN/Proxy: Not detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Status: Clean (0 listings)

## DNS & Service Analysis

• PTR Hostname: vps2649305.fastwebserver.de
• Forward Resolution: Confirmed (1 hostname)
• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None exposed
• Email Authentication: SPF/DMARC not configured

## Control Plane Data

• BGP Prefix: 89.163.128.0/17
• Route Stability: Unstable
• RPKI State: Not validated
• DNSSEC: Valid
• DNSBL Listings: 0 (out of 8 total checks)
• Route Changes (30d): 0

## Historical Observation Summary

• Total Observations: 16
• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No
• Recent Signals: Consistent ownership data with stable geolocation assignments

## Relationship Graph

The IP maintains DNS associations with hostname vps2649305.fastwebserver.de and is classified within the DE-MYLOC-DUS-20060217 network segment. No additional organizational or infrastructure relationships detected.

## Neighborhood Analysis

• /24 Subnet: 89.163.214.187/24
• Neighbor Count: 0
• Abuse Density: 0
• Threat Siblings: 0
• Risk Distribution: No elevated risk neighbors detected

## Threat Indicators

• Abuse Confidence Score: Not applicable (low risk)
• Known Campaigns: None
• Threat Feeds: No matches
• Honeypot Hits: 0
• DNSBL Listed: No

## Recommended Actions

Security Posture: No immediate action required. The IP presents no active threat indicators.

Monitoring: Continue routine passive monitoring. No firewall rules or blocking recommendations generated due to low risk profile.

Investigation Priority: LOW

---

Disclaimer: Intelligence derived from automated IP reputation analysis. Validate findings with additional threat intelligence sources before implementing security controls.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.