94.139.31.59
IP Intelligence Briefing: 94.139.31.59/32
Subject: Threat Intelligence Assessment for 94.139.31.59
Assessment Date: 2026-07-22
Executive Summary: The target IP 94.139.31.59 is geolocated to Berlin, Germany, within AS50436 (Tele Columbus AG). The IP presents as a low-risk address with no active threat indicators, zero blacklist listings, and no open ports. The address resolves to pyur.net with valid SPF and DMARC email authentication records. Neighborhood analysis indicates minimal subnet abuse density, with all four observed neighbors classified as low-risk.
---
Network Classification & Ownership:
The IP is assigned to ASN 50436 (TC-CIN - Tele Columbus AG, DE) within the RIPE NCC registry. Registration occurred in 2008-10-30. The address resolves to a dynamic hostname 94.139.31.59.dyn.pyur.net under the pyur.net domain. Forward DNS resolution is confirmed. Email authentication records show SPF and DMARC policies in place for the domain.
Geolocation:
Location data indicates Berlin, State of Berlin, Germany (DE) with timezone Europe/Berlin. Two geo sources contributed to consensus validation. Geographic data marked as plausible.
Threat Indicators:
The IP shows no active threat indicators. Classification flags indicate the address is not a Tor exit node, known attacker, spam source, cloud service, CDN, VPN, proxy, Tor, hosting service, mobile, residential, bogon, or anycast. The service purpose is classified as "Firewalled / No Services." Open ports: none detected. No TLS certificates or HTTP banners observed. Blacklist count: 0.
Risk Profile:
Current reputation: Low Risk. Risk score: 0. Provider score: 0. Authority score: 0. The control plane shows stable routing with zero route changes in the past 30 days. RPKI state, IRR consistency, and DNSSEC validation are not applicable. No MoAS status observed.
Observation History:
Fourteen observations recorded with the most recent activity on 2026-07-22. Signal types captured include DNS resolution (CAA records: false, DNSSEC valid: true), ASN attribution (50436, Tele Columbus AG, DE), and domain records (pyur.net). One observation indicated 8 total listings with 1 listed and maximum severity "high," though current blacklist count remains at zero.
Relationships:
The IP has one relationship: DNS association to hostname 94.139.31.59.dyn.pyur.net. No organizational, subnet, or certificate relationships were detected.
Neighborhood Analysis:
The /24 subnet (94.139.31.0/24) contains four neighbor IPs: 94.139.31.42, 94.139.31.125, 94.139.31.144, and 94.139.31.176. All four neighbors maintain low-risk classifications with risk scores of 25 and authority scores of 50. Subnet abuse density: 0. Inherited risk: 0. No threat siblings detected in the immediate neighborhood.
Recommended Actions:
No immediate blocking or firewall rules required based on current risk profile. The IP demonstrates benign characteristics consistent with legitimate hosting infrastructure.
Conclusion:
94.139.31.59 is a low-risk IP address operating within a clean subnet environment. No defensive actions are warranted at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Tele Columbus IP Contact |
| ASN | AS50436 |
| Network Name | TELECOLUMBUS |
| CIDR Block | 94.139.24.0/21 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 94.139.31.59.dyn.pyur.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 94.139.31.59.dyn.pyur.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS50436 |
| Network Prefix | 94.139.16.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 8% | 2 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:22:25 UTC |
| Last Seen | 2026-08-22 15:44:05 UTC |
| Profile Built | 2026-08-29 10:28:10 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 94.139.31.59
Who owns the IP address 94.139.31.59?
94.139.31.59 is registered to Tele Columbus IP Contact. The address falls within the 94.139.24.0/21 network block. Registration is held at RIPE.
Where is 94.139.31.59 located?
Geolocation data places 94.139.31.59 in Berlin, State of Berlin, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 94.139.31.59 malicious or safe?
94.139.31.59 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 94.139.31.59?
The reverse DNS (PTR) record for 94.139.31.59 is 94.139.31.59.dyn.pyur.net. This hostname is not forward-confirmed, so it should be treated as a weak signal.