IP INTELLIGENCE BRIEFING: 94.139.30.249
Classification: Low Risk – Defensive Monitoring
---
**Executive Summary**
IP address 94.139.30.249 is associated with Tele Columbus IP Contact (ASN 50436) in Berlin, Germany. The IP demonstrates low-risk characteristics with a risk score of 25/100. No active threat indicators, known malicious campaigns, or persistent abuse patterns observed. The address is currently firewalled with no publicly accessible services.
---
**Ownership and Network Profile**
| Attribute | Value |
|---|---|
| **Organization** | Tele Columbus IP Contact |
| **ASN** | 50436 |
| **Network Block** | 94.139.24.0/21 |
| **RIR** | RIPE |
| **Abuse Contact** | abuse@mip-platform.net |
| **Registration** | RIPE Network |
Geolocation:
- Country: Germany (DE)
- City: Berlin
- Coordinates: 51.17°N, 10.45°E
- Region: State of Berlin
---
**Threat Assessment**
- Overall Risk Score: 25/100 (Low Risk)
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0
- DNSBL Listings: 1/8 total lists
- Threat Persistence: None detected
- Malicious Campaigns: None associated
---
**Network Services and DNS**
- Open Ports: None detected
- DNS PTR Hostname: 94.139.30.249.dyn.pyur.net
- Forward Resolution: 94.139.30.249.dyn.pyur.net (unconfirmed)
- Email Authentication: SPF and DMARC records present
- Service Status: Firewalled / No Services
---
**Historical Observations**
17 Total Signals Observed
- Recent geographic signals consistently point to Berlin, Germany
- Ownership signals confirm Tele Columbus IP Contact assignment
- No significant changes in ownership or threat profile over observation period
- No persistent malicious activity detected
---
**Relationship Analysis**
- Network Association: TELECOLUMBUS (primary network)
- DNS Associations: 94.139.30.249.dyn.pyur.net
- Connected Entities: 6 relationships identified
---
**Subnet Neighborhood Analysis**
Subnet: 94.139.30.0/24
- Total Neighbors: 6
- Abuse Density: 0
- Risk Distribution: 0 High / 1 Medium / 5 Low
Notable Neighbor: 94.139.30.132 (Risk Score: 40)
---
**Security Actions and Recommendations**
Recommended Actions: None required at this time.
Firewall Rules: No immediate blocking or allow-listing recommended based on current risk profile.
Monitoring Status: Continue standard monitoring. No escalation necessary.
---
**Conclusion**
IP 94.139.30.249 is a residential or infrastructure endpoint under Tele Columbus IP Contact's network with minimal risk characteristics. The absence of open services, combined with low risk scoring and no threat indicators, indicates benign network activity. Standard defensive monitoring protocols are sufficient; no immediate action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Tele Columbus IP Contact |
| ASN | AS50436 |
| Network Name | TELECOLUMBUS |
| CIDR Block | 94.139.24.0/21 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 94.139.30.249.dyn.pyur.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 94.139.30.249.dyn.pyur.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS50436 |
| Network Prefix | 94.139.16.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:22:25 UTC |
| Last Seen | 2026-08-22 15:39:37 UTC |
| Profile Built | 2026-08-29 10:28:27 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 94.139.30.249
Who owns the IP address 94.139.30.249?
94.139.30.249 is registered to Tele Columbus IP Contact. The address falls within the 94.139.24.0/21 network block. Registration is held at RIPE.
Where is 94.139.30.249 located?
Geolocation data places 94.139.30.249 in Berlin, State of Berlin, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 94.139.30.249 malicious or safe?
94.139.30.249 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 94.139.30.249?
The reverse DNS (PTR) record for 94.139.30.249 is 94.139.30.249.dyn.pyur.net. This hostname is not forward-confirmed, so it should be treated as a weak signal.