89.166.241.32📋 Copy

# IP Intelligence Briefing: 89.166.241.32/32

Date: 2026-07-24

Classification: Low Risk / Residential ISP

Risk Score: 25/100

## Executive Summary

IP 89.166.241.32 belongs to EWE TEL Hostmaster (ASN 9145) within the OSNATEL-DSL-IPPOOL block. The address is classified as a dynamic residential IP with no active services, no threat indicators, and no known malicious activity. Neighborhood analysis confirms clean subnet classification with zero abuse density.

## Technical Profile

• ISP/Provider: EWE TEL Hostmaster (German telecommunications provider)
• Network Block: 89.166.192.0/18 (89.166.241.32/24)
• Geolocation: Germany (D-26133 Oldenburg), Cloppenburger Strasse
• DNS: dyndsl-089-166-241-032.ewe-ip-backbone.de
• Network Role: Dynamic Residential IP Pool
• Service Status: Firewalled / No Services Detected
• Reverse DNS: Confirmed dynamic hostname

## Threat Indicators

• Abuse Confidence Score: Not applicable
• Blacklist Status: 1 DNSBL listing out of 8 checked lists
• Threat Feeds: No active campaigns or threat indicators
• Tor/Proxy/VPN: Not detected
• Known Attacker: No records

## Control Plane

• BGP Prefix: 89.166.128.0/17
• Route Stability: Unstable (false)
• Route Changes (30d): 0
• RPKI State: Not configured
• DNSSEC: Valid

## Historical Observations (17 signals)

Recent telemetry (2026-07-24) confirms:

• Consistent ASN and organization attribution to EWE TEL
• Residential IP classification maintained
• Subnet classification: Clean
• No ownership changes detected
• No persistent malicious activity observed

## Network Neighborhood (89.166.241.0/24)

• Abuse Density: 0
• Neighbor Count: 0 (isolated dynamic allocation)
• Threat Siblings: 0
• Overall Classification: Clean

## Recommended Actions

Status: No immediate action required. The IP presents low risk with no actionable threat indicators.

Monitoring Considerations:

• Monitor for service activation (ports opening)
• Watch for DNSBL listing changes
• Track geolocation consistency (signals show US/NJ in some probes, DE in others)

## SOC Analyst Notes

This IP is a standard residential dynamic address from a German ISP. The low risk score (25) and clean neighborhood metrics indicate minimal threat. No blocking or filtering recommended unless specific threat intelligence correlates with this address. The single DNSBL listing appears to be a false positive or historical artifact given the overall clean profile.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.