## IP Intelligence Briefing: 94.134.94.219/32
Classification: Low Risk Infrastructure IP
Date of Analysis: 2026-07-22
---
Executive Summary
Target IP 94.134.94.219 is a low-risk residential or infrastructure address assigned to 1&1 Versatel GmbH (ASN 8881) in Cologne, Germany. The IP exhibits minimal malicious indicators with a risk score of 15/100 and no active threat associations. No security actions are recommended at this time.
---
Ownership and Network Context
| Attribute | Value |
|---|---|
| **Organization** | 1&1 Versatel GmbH |
| **Netname** | DE-VERSATEL-20080807 |
| **ASN** | 8881 |
| **CIDR Block** | 94.134.0.0/15 |
| **Location** | Cologne, North Rhine-Westphalia, Germany |
| **RIR** | RIPE |
The address belongs to a major German hosting provider. The network classification indicates "Firewalled / No Services" with no open ports detected across probe attempts.
---
Threat Indicators
| Indicator | Status |
|---|---|
| Risk Score | 15 (Low Risk) |
| Blacklist Count | 0 |
| Known Attacker | No |
| Spam Source | No |
| Tor Exit Node | No |
| Persistently Malicious | No |
| Threat Persistence Days | 0 |
| DNSBL Listed | 1 of 8 total lists |
Operator Score: 0.1304 (Minimal)
The IP shows no evidence of malicious activity. The single DNSBL listing is likely related to historical or temporary associations rather than active abuse.
---
Neighborhood Assessment
Subnet: 94.134.94.219/24
- Total Siblings: 9
- Active Siblings: 1
- Threat Siblings: 0
- Abuse Density: 0%
- Risk Distribution: 0 High / 1 Medium / 7 Low
Notable neighbor: 94.134.94.109 (Risk Score: 40)
The /24 subnet demonstrates clean characteristics with minimal abuse activity. One neighbor (94.134.94.109) shows elevated risk at score 40, warranting periodic monitoring.
---
Historical Signal Analysis
Total Observations: 14
Most Recent: 2026-07-22
Signal observations have remained stable with consistent geolocation inference pointing to Germany/Cologne. No degradation or escalation in threat indicators has been observed over the observation period.
Key Historical Signals:
- Subnet classification: Clean (0 abuse density)
- Geolocation: Consistent Germany attribution
- Ownership stability: No changes recorded
---
Relationships
All four detected relationships map to the same network identifier (DE-VERSATEL-20080807). No associations with hostnames, certificates, or external IP addresses were discovered.
---
Security Recommendations
Current Risk Level: LOW
Action Required: None
Based on the risk profile, no firewall rules or blocking actions are recommended. The IP should be allowed with standard egress controls.
Monitoring Priority: Low
- No active threat indicators
- Clean neighborhood profile
- Stable historical signals
Recommended Actions:
1. Allow traffic with standard organizational firewall policies
2. Monitor neighbor 94.134.94.109 for potential escalation
3. Re-evaluate if this IP appears in future threat indicators
---
Intelligence Confidence
This assessment is based on IPDebrief's real-time intelligence platform combining geolocation data, threat feeds, network classification, and historical signal analysis. The low-risk classification is supported by multiple data sources and consistent signal observations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | 1&1 Versatel GmbH |
| ASN | AS8881 |
| Network Name | DE-VERSATEL-20080807 |
| CIDR Block | 94.134.0.0/15 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8881 |
| Network Prefix | 94.134.94.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 28% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 15% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:22:25 UTC |
| Last Seen | 2026-10-08 13:18:19 UTC |
| Profile Built | 2026-10-08 13:19:33 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 94.134.94.219
Who owns the IP address 94.134.94.219?
94.134.94.219 is registered to 1&1 Versatel GmbH. The address falls within the 94.134.0.0/15 network block. Registration is held at RIPE.
Where is 94.134.94.219 located?
Geolocation data places 94.134.94.219 in Cologne, North Rhine-Westphalia, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 94.134.94.219 malicious or safe?
94.134.94.219 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.