# 89.244.95.101 — IP Intelligence Summary

89.244.95.101 is an IPv4 address operated by 1&1 Versatel GmbH (AS8881), geolocated to Karlsruhe, Germany. Its reverse DNS name is i59F45F65.versanet.de. As of October 6, 2026, IPDebrief rates it Low Risk (15/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/89.244.95.101
- Last updated: 2026-10-06

## Ownership

- Organization: 1&1 Versatel GmbH
- Network name: DE-VERSATEL-20060504
- Allocated block: 89.244.0.0/14
- ASN: AS8881 (https://ipdebrief.com/asn/8881)
- Regional registry: RIPE

## Location

- City: Karlsruhe
- Region: Baden-Wurttemberg
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (15/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- i59F45F65.versanet.de
- Forward-confirmed: yes

## Analyst narrative

\# THREAT INTELLIGENCE BRIEFING

**Target IP:** 89.244.95.101/32

**Date:** Current

**Classification:** Moderate Risk (Score: 40/100)

**Provider:** 1&1 Versatel GmbH (ASN: 8881)

\---

\## EXECUTIVE SUMMARY

IP 89.244.95.101 is a German infrastructure address operated by 1&1 Versatel GmbH. The IP is currently classified as Moderate Risk (score 40) with no active threat indicators. However, the IP is listed on 2 DNSBL entries and shows evidence of historical abuse activity. No active services or open ports were detected during analysis.

\## NETWORK ATTRIBUTES

\- **Location:** Karlsruhe, Baden-Württemberg, Germany (51.17°N, 10.45°E)

\- **Network Block:** 89.244.0.0/14 (DE-VERSATEL-20060504)

\- **DNS Resolution:** i59F45F65.versanet.de (versanet.de)

\- **Forward DNS Confirmed:** Yes

\- **DNSSEC Valid:** Yes

\- **Services Detected:** None (Firewalled / No Services)

\## THREAT ASSESSMENT

**Current Threat Indicators:** None

**Blacklist Status:** Listed on 2 of 8 DNSBL checks (high severity)

**Abuse Confidence:** Unknown

**Campaign Association:** None detected

The IP's moderate risk score is primarily driven by historical abuse activity and DNSBL listings rather than active malicious behavior. No evidence of Tor exit node, proxy, CDN, or hosting services was observed.

\## OBSERVATION HISTORY

Analysis of 19 historical observations reveals:

\- **DNSSEC Validation:** Valid (confirmed on 2026-07-23)

\- **Geolocation:** Consistent Germany attribution (51.17°N, 10.45°E)

\- **ICMP:** Blocked (unable to validate)

\- **Recent Listings:** 2 DNSBL listings with high severity rating

The IP shows no persistent malicious behavior patterns but maintains a history of abuse-related activity.

\## NEIGHBORHOOD ANALYSIS

Subnet: 89.244.95.0/24

\- **Abuse Density:** 0 (no inherited risk from subnet)

\- **Classification:** Mostly Clean

\- **Active Siblings:** 0

\- **Threat Siblings:** 2

**Neighbor IPs:**

| IP Address | Risk Score | Authority Score |

|------------|------------|-----------------|

| 89.244.95.65 | 25 | 60 |

| 89.244.95.83 | 40 | 60 |

\## RELATIONSHIP GRAPH

\- **Network Associations:** DE-VERSATEL-20060504 (3 relationships)

\- **DNS Associations:** i59F45F65.versanet.de (2 relationships)

\- **Control Plane:** BGP prefix 89.244.80.0/20; route stability flagged as unstable

\## RECOMMENDED ACTIONS

1. **Allow Traffic:** No active threat indicators detected; current behavior consistent with infrastructure hosting

2. **Monitor DNSBL:** Track continued DNSBL listing activity

3. **Review Subnet Context:** Monitor neighbor IPs 89.244.95.65 and 89.244.95.83 for coordinated activity

4. **Firewall Policy:** Maintain current allow rules; no blocking required at this time

\---

**Analyst Notes:** This IP represents legitimate infrastructure from a major German provider (1&1 Versatel GmbH) with historical abuse listings but no current active threats. The moderate risk score reflects past activity rather than present malicious behavior. SOC teams should monitor the DNSBL listings and maintain awareness of the subnet's abuse density.

## Nearby addresses

- 89.244.95.65 (https://ipdebrief.com/89.244.95.65)
- 89.244.95.83 (https://ipdebrief.com/89.244.95.83)

---

Source: IPDebrief, "89.244.95.101 IP intelligence", https://ipdebrief.com/89.244.95.101, updated 2026-10-06. Assessments are probabilistic.