94.100.70.253📋 Copy

# IP Intelligence Briefing: 94.100.70.253/32

Classification: LOW RISK — Residential Fixed IP

Risk Score: 25/100

Date: 2026-07-27

---

## Executive Summary

IP address 94.100.70.253 is a residential fixed-line connection classified as Low Risk. The address is associated with a DSL network operated by Carsten Weigel under the Drahtlos-DSL-LAN network. No active threat indicators, malware campaigns, or abuse signals were detected. No recommended blocking actions are required at this time.

---

## Ownership & Network Infrastructure

• ASN: 21413
• Organization: Carsten Weigel
• Network Name: Drahtlos-DSL-LAN
• CIDR Block: 94.100.70.0/24
• RIR: RIPE
• Abuse Contact: abuse@envia-tel.net (via RDAP)
• Network Classification: Residential Fixed IP

---

## Geolocation Data

Multiple geolocation signals indicate the IP is located in Germany (DE), with signals pointing to:

• Primary: Berlin, Saxony
• Alternative signals: Leisnig, Belgershain (Chemnitzer Strasse)

Geographic consensus is moderate due to residential IP mobility patterns. RTT measurements indicate a 14-hop traceroute path through Comcast transit networks.

---

## Threat Indicators Assessment

• Abuse Confidence Score: Not applicable (residential IP)
• Blacklist Status: Not listed (0/0 DNSBL entries)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Associated Campaigns: None detected
• Threat Persistence: 0 days

---

## Network Services & DNS

• Open Ports: None detected (Firewalled / No Services)
• DNS PTR: d01.static253.drahtlos-dsl.de
• DNS Domain: drahtlos-dsl.de
• Email Authentication: SPF: Yes, DMARC: Yes
• TLS Certificate: None
• HTTP Service: None

---

## Neighborhood Analysis

Subnet 94.100.70.0/24 shows:

• Abuse Density: 1/10 (mostly clean)
• Classification: mostly_clean
• Inherited Risk: 2/100
• Total Siblings: 1
• Threat Siblings: 1

The /24 subnet contains minimal abuse activity.

---

## Historical Signals (Last 18 Observations)

Recent observations confirm consistent ownership attribution to Carsten Weigel (ASN 21413, RIPE). Geolocation signals show expected variance for residential DSL addresses. No escalation in threat signals observed.

---

## Security Recommendations

Current Action: Monitor

• No immediate blocking or filtering required
• Risk score (25) falls within normal residential IP baseline
• No threat indicators warranting intervention
• Standard logging and monitoring recommended for compliance

Rationale: This IP exhibits characteristics of a legitimate residential connection. The low risk score, absence of threat indicators, and clean subnet classification indicate this is not a malicious source. SOC teams may log traffic but should not take automated blocking action.

---

*Intelligence generated via IPDebrief platform. Data current as of 2026-07-27.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.