89.244.85.65
89.244.85.65 is an IPv4 address operated by 1&1 Versatel GmbH (AS8881), geolocated to Darmstadt, Germany. Its reverse DNS name is i59F45541.versanet.de. As of October 6, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.
IP INTELLIGENCE BRIEFING
Target: 89.244.85.65/32
Classification: Moderate Risk (Score: 40)
Date: Current Assessment
---
EXECUTIVE SUMMARY
IP 89.244.85.65 is associated with 1&1 Versatel GmbH (ASN 8881) and is geolocated to Darmstadt, Hesse, Germany. The address maintains a moderate risk profile (40) with no active threat indicators. The IP resolves to hostname i59F45541.versanet.de via PTR record. Network scans indicate no open services (firewalled), though the IP is listed on two DNS blacklists.
---
OWNERSHIP & NETWORK ATTRIBUTES
| Attribute | Value |
|---|---|
| **Organization** | 1&1 Versatel GmbH |
| **ASN** | 8881 |
| **Netname** | DE-VERSATEL-20060504 |
| **CIDR Block** | 89.244.0.0/14 |
| **RIR** | RIPE |
| **Geolocation** | Darmstadt, Hesse, Germany |
| **Coordinates** | 51.17°N, 10.45°E |
---
THREAT INTELLIGENCE
Current Risk Profile: Moderate (40/100)
Active Threat Indicators: None
- Not a Tor exit node
- Not flagged as known attacker
- Not identified as spam source
Blacklist Status:
- Listed on 2 of 8 DNS blacklists
- Maximum severity: High
Network Role: Infrastructure (Firewalled / No Services)
- No open ports detected
- No HTTP/HTTPS services observed
- TLS certificate: Not present
---
NEIGHBORHOOD ANALYSIS
Subnet: 89.244.85.0/24
Classification: Mixed
Abuse Density: 28.57%
Neighbor Risk Distribution:
- High Risk: 0
- Medium Risk: 3 (scores 15-40)
- Low Risk: 3 (scores 0-15)
Notable Neighbors:
- 89.244.85.20 (Risk: 40, Authority: 60)
- 89.244.85.97 (Risk: 40, Authority: 60)
- 89.244.85.107 (Risk: 40, Authority: 60)
---
OBSERVATION HISTORY
Recent signal observations (2026-07-23):
- Geolocation: Consistent inference to Germany (51.17°N, 10.45°E)
- DNS Resolution: versanet.de domain confirmed, DNSSEC validation active
- Blacklist Activity: 2 DNS blacklist listings detected
- Network Connectivity: ICMP blocked, unable to validate via ICMP
Temporal Indicators:
- No ownership changes detected
- Not persistently malicious
- Single threat observation event recorded
---
RELATIONSHIP GRAPH
DNS Associations:
- i59F45541.versanet.de (verified)
Network Associations:
- DE-VERSATEL-20060504 (primary network)
No certificate or campaign correlations identified.
---
RECOMMENDED ACTIONS
Immediate Recommendations:
Based on risk profile (40) and blacklist listings, blocking is recommended for defensive security posture.
Firewall Rules:
- iptables: `iptables -A INPUT -s 89.244.85.65 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 89.244.85.65 drop`
- nginx: `deny 89.244.85.65;`
- pfSense: `89.244.85.65/32`
- Cloudflare WAF: Block with expression `ip.src eq 89.244.85.65`
- AWS WAF: Address `89.244.85.65/32`
Assessment Notes:
- Risk score of 40 indicates moderate concern; consider contextual threat signals before enforcement
- No active exploit activity detected at time of assessment
- Subnet-level abuse density (28.57%) warrants monitoring of neighboring IPs
---
CONCLUSION
IP 89.244.85.65 represents a moderate-risk infrastructure address associated with legitimate hosting provider 1&1 Versatel GmbH. While no active attack patterns are observed, the combination of DNS blacklist listings and neighborhood abuse density suggests potential for misuse. Recommended action is blocking at perimeter with continued monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | 1&1 Versatel GmbH |
| ASN | AS8881 |
| Network Name | DE-VERSATEL-20060504 |
| CIDR Block | 89.244.0.0/14 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | i59F45541.versanet.de |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | i59F45541.versanet.de |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8881 |
| Network Prefix | 89.244.80.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 2 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 50% | 2 | 3 |
| reputation | 25% | 1 | 2 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 8 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-03 16:58:44 UTC |
| Last Seen | 2026-10-06 00:54:13 UTC |
| Profile Built | 2026-10-06 00:54:52 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 89.244.85.65
Who owns the IP address 89.244.85.65?
89.244.85.65 is registered to 1&1 Versatel GmbH. The address falls within the 89.244.0.0/14 network block. Registration is held at RIPE.
Where is 89.244.85.65 located?
Geolocation data places 89.244.85.65 in Darmstadt, Hesse, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 89.244.85.65 malicious or safe?
89.244.85.65 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 89.244.85.65?
The reverse DNS (PTR) record for 89.244.85.65 is i59F45541.versanet.de. This hostname is forward-confirmed, meaning it resolves back to the same address.