# 89.244.85.65 — IP Intelligence Summary

89.244.85.65 is an IPv4 address operated by 1&1 Versatel GmbH (AS8881), geolocated to Darmstadt, Germany. Its reverse DNS name is i59F45541.versanet.de. As of October 6, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/89.244.85.65
- Last updated: 2026-10-06

## Ownership

- Organization: 1&1 Versatel GmbH
- Network name: DE-VERSATEL-20060504
- Allocated block: 89.244.0.0/14
- ASN: AS8881 (https://ipdebrief.com/asn/8881)
- Regional registry: RIPE

## Location

- City: Darmstadt
- Region: Hesse
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- i59F45541.versanet.de
- Forward-confirmed: yes

## Analyst narrative

**IP INTELLIGENCE BRIEFING**

**Target:** 89.244.85.65/32

**Classification:** Moderate Risk (Score: 40)

**Date:** Current Assessment

\---

\### EXECUTIVE SUMMARY

IP 89.244.85.65 is associated with 1&1 Versatel GmbH (ASN 8881) and is geolocated to Darmstadt, Hesse, Germany. The address maintains a moderate risk profile (40) with no active threat indicators. The IP resolves to hostname i59F45541.versanet.de via PTR record. Network scans indicate no open services (firewalled), though the IP is listed on two DNS blacklists.

\---

\### OWNERSHIP & NETWORK ATTRIBUTES

| Attribute | Value |

|-----------|-------|

| **Organization** | 1&1 Versatel GmbH |

| **ASN** | 8881 |

| **Netname** | DE-VERSATEL-20060504 |

| **CIDR Block** | 89.244.0.0/14 |

| **RIR** | RIPE |

| **Geolocation** | Darmstadt, Hesse, Germany |

| **Coordinates** | 51.17°N, 10.45°E |

\---

\### THREAT INTELLIGENCE

**Current Risk Profile:** Moderate (40/100)

**Active Threat Indicators:** None

\- Not a Tor exit node

\- Not flagged as known attacker

\- Not identified as spam source

**Blacklist Status:**

\- Listed on 2 of 8 DNS blacklists

\- Maximum severity: High

**Network Role:** Infrastructure (Firewalled / No Services)

\- No open ports detected

\- No HTTP/HTTPS services observed

\- TLS certificate: Not present

\---

\### NEIGHBORHOOD ANALYSIS

**Subnet:** 89.244.85.0/24

**Classification:** Mixed

**Abuse Density:** 28.57%

**Neighbor Risk Distribution:**

\- High Risk: 0

\- Medium Risk: 3 (scores 15-40)

\- Low Risk: 3 (scores 0-15)

**Notable Neighbors:**

\- 89.244.85.20 (Risk: 40, Authority: 60)

\- 89.244.85.97 (Risk: 40, Authority: 60)

\- 89.244.85.107 (Risk: 40, Authority: 60)

\---

\### OBSERVATION HISTORY

Recent signal observations (2026-07-23):

\- **Geolocation:** Consistent inference to Germany (51.17°N, 10.45°E)

\- **DNS Resolution:** versanet.de domain confirmed, DNSSEC validation active

\- **Blacklist Activity:** 2 DNS blacklist listings detected

\- **Network Connectivity:** ICMP blocked, unable to validate via ICMP

**Temporal Indicators:**

\- No ownership changes detected

\- Not persistently malicious

\- Single threat observation event recorded

\---

\### RELATIONSHIP GRAPH

**DNS Associations:**

\- i59F45541.versanet.de (verified)

**Network Associations:**

\- DE-VERSATEL-20060504 (primary network)

No certificate or campaign correlations identified.

\---

\### RECOMMENDED ACTIONS

**Immediate Recommendations:**

Based on risk profile (40) and blacklist listings, blocking is recommended for defensive security posture.

**Firewall Rules:**

\- **iptables:** \`iptables -A INPUT -s 89.244.85.65 -j DROP\`

\- **nftables:** \`nft add rule inet filter input ip saddr 89.244.85.65 drop\`

\- **nginx:** \`deny 89.244.85.65;\`

\- **pfSense:** \`89.244.85.65/32\`

\- **Cloudflare WAF:** Block with expression \`ip.src eq 89.244.85.65\`

\- **AWS WAF:** Address \`89.244.85.65/32\`

**Assessment Notes:**

\- Risk score of 40 indicates moderate concern; consider contextual threat signals before enforcement

\- No active exploit activity detected at time of assessment

\- Subnet-level abuse density (28.57%) warrants monitoring of neighboring IPs

\---

\### CONCLUSION

IP 89.244.85.65 represents a moderate-risk infrastructure address associated with legitimate hosting provider 1&1 Versatel GmbH. While no active attack patterns are observed, the combination of DNS blacklist listings and neighborhood abuse density suggests potential for misuse. Recommended action is blocking at perimeter with continued monitoring.

## Nearby addresses

- 89.244.85.20 (https://ipdebrief.com/89.244.85.20)
- 89.244.85.31 (https://ipdebrief.com/89.244.85.31)
- 89.244.85.72 (https://ipdebrief.com/89.244.85.72)
- 89.244.85.97 (https://ipdebrief.com/89.244.85.97)
- 89.244.85.107 (https://ipdebrief.com/89.244.85.107)
- 89.244.85.134 (https://ipdebrief.com/89.244.85.134)
- 89.244.85.140 (https://ipdebrief.com/89.244.85.140)
- 89.244.85.142 (https://ipdebrief.com/89.244.85.142)
- 89.244.85.163 (https://ipdebrief.com/89.244.85.163)
- 89.244.85.195 (https://ipdebrief.com/89.244.85.195)
- 89.244.85.229 (https://ipdebrief.com/89.244.85.229)

---

Source: IPDebrief, "89.244.85.65 IP intelligence", https://ipdebrief.com/89.244.85.65, updated 2026-10-06. Assessments are probabilistic.