# 94.134.109.96 — IP Intelligence Summary

94.134.109.96 is an IPv4 address operated by 1&1 Versatel GmbH (AS8881), geolocated to Hamburg, Germany. Its reverse DNS name is i5E866D60.versanet.de. As of October 6, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/94.134.109.96
- Last updated: 2026-10-06

## Ownership

- Organization: 1&1 Versatel GmbH
- Network name: DE-VERSATEL-20080807
- Allocated block: 94.134.0.0/15
- ASN: AS8881 (https://ipdebrief.com/asn/8881)
- Regional registry: RIPE

## Location

- City: Hamburg
- Region: Free and Hanseatic City of Hamburg
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (0/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- i5E866D60.versanet.de
- Forward-confirmed: yes

## Analyst narrative

\# IPDebrief Threat Intelligence Briefing

**Subject:** 94.134.109.96/32

**Classification:** Low Risk

**Date:** 2026-07-24

\---

\## Executive Summary

IP address 94.134.109.96 is registered to 1&1 Versatel GmbH (ASN 8881) with a Low Risk reputation score of 25. The address is geolocated to Hamburg, Germany and is classified as "clean" with no observed malicious activity. No active threat indicators, blacklist listings, or campaign associations were detected.

\---

\## Network Ownership & Classification

\- **ASN:** 8881 (1&1 Versatel GmbH)

\- **Organization:** 1&1 Versatel GmbH

\- **CIDR Block:** 94.134.0.0/15

\- **Network Name:** DE-VERSATEL-20080807

\- **RIR:** RIPE

\- **Geolocation:** Hamburg, Germany (51.17°N, 10.45°E)

\- **Timezone:** Europe/Berlin

\- **Geo Validation:** Plausible (ICMP validation blocked - unable to validate)

**Classification Flags:**

\- Is Cloud: No

\- Is CDN: No

\- Is VPN: No

\- Is Proxy: No

\- Is Tor: No

\- Is Hosting: No

\- Is Mobile: No

\- Is Residential: No

\---

\## Threat Assessment

**Risk Score:** 25 (Low Risk)

| Indicator | Status |

|-----------|--------|

| Blacklist Count | 0 |

| Is Known Attacker | False |

| Is Spam Source | False |

| Is Tor Exit Node | False |

| Abuse Confidence Score | N/A |

| Pulsedive Risk | N/A |

| Known Campaigns | None |

**Threat Indicators:** No threat indicators detected across all monitored feeds.

\---

\## DNS & Email Reputation

\- **PTR Hostname:** i5E866D60.versanet.de

\- **Forward Resolution:** Confirmed

\- **Domain:** versanet.de

\- **Hosted Domains:** 0

\- **Email Authentication:**

\- SPF: Configured (Yes)

\- DMARC: Not configured

\---

\## Service & Network Activity

\- **Open Ports:** None detected

\- **TLS Certificate:** Not present

\- **HTTP Title:** Not present

\- **Server Banner:** Not present

\- **Service Purpose:** Firewalled / No Services

\---

\## Neighborhood Analysis (94.134.109.0/24)

\- **Subnet Classification:** Clean

\- **Abuse Density:** 0%

\- **Total Siblings:** 2

\- **Active Siblings:** 0

\- **Threat Siblings:** 0

\- **Inherited Risk:** 0

**Neighbor Assessment:**

| IP | Risk Score | Authority Score |

|----|------------|-----------------|

| 94.134.109.167 | 0 | 50 |

The /24 subnet shows minimal activity with no threat indicators inherited from neighboring addresses.

\---

\## Relationship Graph

The IP maintains associations with:

\- **DNS Associations:** i5E866D60.versanet.de

\- **Network:** DE-VERSATEL-20080807

No external organization or certificate relationships identified.

\---

\## Control Plane Data

\- **BGP Prefix:** 94.134.96.0/20

\- **Route Changes (30d):** 0

\- **Is Route Stable:** False

\- **Is MOAS:** False

\- **DNSSEC Valid:** Yes

\- **Has CAA:** No

\- **DNSBL Listed:** 1 of 8 total lists

\- **Operator Score:** 0.2609 (Basic)

\---

\## Observation History

19 observations recorded with the following patterns:

\- **Geolocation Signals:** Consistent Hamburg, DE positioning via multi-signal inference

\- **Network Classification:** Stable "clean" classification

\- **Ownership:** No ownership changes observed

\- **Threat Persistence:** 0 days; not persistently malicious

\---

\## Recommended Actions

**Risk Score:** 25 (Low Risk)

No specific firewall rules or blocking recommendations generated. Standard monitoring and logging is sufficient for this IP address based on current risk profile.

\---

**Conclusion:** IP 94.134.109.96 presents a low-risk threat profile with no observed malicious activity. The address belongs to a legitimate telecommunications provider with standard infrastructure. Routine monitoring is recommended; no immediate defensive actions required.

## Nearby addresses

- 94.134.109.101 (https://ipdebrief.com/94.134.109.101)
- 94.134.109.160 (https://ipdebrief.com/94.134.109.160)
- 94.134.109.167 (https://ipdebrief.com/94.134.109.167)
- 94.134.109.202 (https://ipdebrief.com/94.134.109.202)

---

Source: IPDebrief, "94.134.109.96 IP intelligence", https://ipdebrief.com/94.134.109.96, updated 2026-10-06. Assessments are probabilistic.