89.244.95.101
89.244.95.101 is an IPv4 address operated by 1&1 Versatel GmbH (AS8881), geolocated to Karlsruhe, Germany. Its reverse DNS name is i59F45F65.versanet.de. As of October 6, 2026, IPDebrief rates it Low Risk (15/100); no anonymizing service was detected.
# THREAT INTELLIGENCE BRIEFING
Target IP: 89.244.95.101/32
Date: Current
Classification: Moderate Risk (Score: 40/100)
Provider: 1&1 Versatel GmbH (ASN: 8881)
---
## EXECUTIVE SUMMARY
IP 89.244.95.101 is a German infrastructure address operated by 1&1 Versatel GmbH. The IP is currently classified as Moderate Risk (score 40) with no active threat indicators. However, the IP is listed on 2 DNSBL entries and shows evidence of historical abuse activity. No active services or open ports were detected during analysis.
## NETWORK ATTRIBUTES
- Location: Karlsruhe, Baden-Württemberg, Germany (51.17°N, 10.45°E)
- Network Block: 89.244.0.0/14 (DE-VERSATEL-20060504)
- DNS Resolution: i59F45F65.versanet.de (versanet.de)
- Forward DNS Confirmed: Yes
- DNSSEC Valid: Yes
- Services Detected: None (Firewalled / No Services)
## THREAT ASSESSMENT
Current Threat Indicators: None
Blacklist Status: Listed on 2 of 8 DNSBL checks (high severity)
Abuse Confidence: Unknown
Campaign Association: None detected
The IP's moderate risk score is primarily driven by historical abuse activity and DNSBL listings rather than active malicious behavior. No evidence of Tor exit node, proxy, CDN, or hosting services was observed.
## OBSERVATION HISTORY
Analysis of 19 historical observations reveals:
- DNSSEC Validation: Valid (confirmed on 2026-07-23)
- Geolocation: Consistent Germany attribution (51.17°N, 10.45°E)
- ICMP: Blocked (unable to validate)
- Recent Listings: 2 DNSBL listings with high severity rating
The IP shows no persistent malicious behavior patterns but maintains a history of abuse-related activity.
## NEIGHBORHOOD ANALYSIS
Subnet: 89.244.95.0/24
- Abuse Density: 0 (no inherited risk from subnet)
- Classification: Mostly Clean
- Active Siblings: 0
- Threat Siblings: 2
Neighbor IPs:
| IP Address | Risk Score | Authority Score |
|---|---|---|
| 89.244.95.65 | 25 | 60 |
| 89.244.95.83 | 40 | 60 |
## RELATIONSHIP GRAPH
- Network Associations: DE-VERSATEL-20060504 (3 relationships)
- DNS Associations: i59F45F65.versanet.de (2 relationships)
- Control Plane: BGP prefix 89.244.80.0/20; route stability flagged as unstable
## RECOMMENDED ACTIONS
1. Allow Traffic: No active threat indicators detected; current behavior consistent with infrastructure hosting
2. Monitor DNSBL: Track continued DNSBL listing activity
3. Review Subnet Context: Monitor neighbor IPs 89.244.95.65 and 89.244.95.83 for coordinated activity
4. Firewall Policy: Maintain current allow rules; no blocking required at this time
---
Analyst Notes: This IP represents legitimate infrastructure from a major German provider (1&1 Versatel GmbH) with historical abuse listings but no current active threats. The moderate risk score reflects past activity rather than present malicious behavior. SOC teams should monitor the DNSBL listings and maintain awareness of the subnet's abuse density.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | 1&1 Versatel GmbH |
| ASN | AS8881 |
| Network Name | DE-VERSATEL-20060504 |
| CIDR Block | 89.244.0.0/14 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | i59F45F65.versanet.de |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | i59F45F65.versanet.de |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8881 |
| Network Prefix | 89.244.80.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 2 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 50% | 2 | 3 |
| reputation | 25% | 1 | 2 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 8 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-03 16:58:44 UTC |
| Last Seen | 2026-10-06 06:10:01 UTC |
| Profile Built | 2026-10-06 06:12:39 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 25 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 89.244.95.101
Who owns the IP address 89.244.95.101?
89.244.95.101 is registered to 1&1 Versatel GmbH. The address falls within the 89.244.0.0/14 network block. Registration is held at RIPE.
Where is 89.244.95.101 located?
Geolocation data places 89.244.95.101 in Karlsruhe, Baden-Wurttemberg, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 89.244.95.101 malicious or safe?
89.244.95.101 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 89.244.95.101?
The reverse DNS (PTR) record for 89.244.95.101 is i59F45F65.versanet.de. This hostname is forward-confirmed, meaning it resolves back to the same address.