89.58.58.176📋 Copy

# IP Intelligence Briefing: 89.58.58.176/32

## Executive Summary

IP address 89.58.58.176 presents as a low-risk residential or hosting endpoint with no active threat indicators. The IP is associated with German infrastructure provider NetCup, operates under ASN 197540, and maintains a clean reputation profile with zero blacklist entries.

## Technical Profile

Ownership & Network Assignment

• ASN: 197540
• Organization: NETCUP-MNT
• Network Name: DE-NETCUP-20051123
• CIDR Block: 89.58.0.0/18
• RIR: RIPE
• Country: Germany (DE)
• Region: Bavaria
• City: Karlsruhe
• Coordinates: 51.17°N, 10.45°E
• Timezone: Europe/Berlin

Classification

• Risk Score: 0 (Low Risk)
• Reputation: Low Risk
• Service Purpose: Firewalled / No Services
• Infrastructure Type: Not classified
• Network Role: Non-provider, non-cloud, non-CDN

DNS Resolution

• PTR Record: v2202511300952395409.goodsrv.de
• Forward Resolution: Confirmed (goodsrv.de)
• Forward Hostnames: v2202511300952395409.goodsrv.de
• Email Authentication: No SPF, No DMARC records configured
• Domain: goodsrv.de

Service Exposure

• Open Ports: None detected
• HTTP Services: No active HTTP endpoints
• TLS Certificates: None observed
• Server Banner: No banner data captured

Control Plane Characteristics

• BGP Origin: 89.58.56.0/22
• Route Stability: False
• DNSSEC Validation: Valid
• DNSSEC CAA Records: Not configured
• Operator Score: 0.2609 (Basic)
• DNSBL Listings: 0 hits across 8 total lists

## Threat Intelligence Assessment

Threat Indicators

• Abuse Confidence Score: Not reported
• Blacklist Status: Clean (0 blacklists)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None associated
• Threat Feeds: No matches

Historical Observations

The IP has been observed 17 times across multiple signal categories, with the most recent data captured on 2026-07-23. Historical signals indicate consistent geolocation assignment to Karlsruhe, Germany, with stable ownership under NETCUP infrastructure. No persistent threat patterns were detected.

Neighborhood Analysis

• Subnet: 89.58.58.176/24
• Abuse Density: 1 (low)
• Classification: Mostly clean
• Inherited Risk: 2 (low)
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 1 (potential correlated endpoint in same /24)

## Relationship Graph

Associated Entities

• DNS Associations: v2202511300952395409.goodsrv.de (multiple references)
• Network Associations: DE-NETCUP-20051123

## Recommended Security Actions

Risk Level: Low (0)

Recommended Action: Monitor

No immediate blocking or mitigation actions are recommended. The IP presents as a legitimate infrastructure endpoint with no malicious indicators. However, the single threat sibling in the /24 neighborhood warrants periodic correlation monitoring.

Firewall Rules: None required

Additional Notes:

• No email authentication mechanisms present (no SPF/DMARC)
• Route stability flagged as false; consider monitoring for routing anomalies
• DNSSEC validation confirmed; infrastructure maintains cryptographic DNS
• No open services detected; endpoint appears to be firewalled

---

*Intelligence generated from IPDebrief analysis. Review periodically for changes in risk profile.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.