INTELLIGENCE BRIEFING: 94.31.115.85/32
Date: 2026-06-03
IP Address: 94.31.115.85/32
Classification: Low Risk
---
OVERVIEW
The IP address 94.31.115.85 was classified as "Low Risk" with an overall risk score of 25/100. The address was geolocated to Dußlingen, Baden-Württemberg, Germany (DE), with coordinates 51.17°N, 10.45°E and a timezone of Europe/Berlin. Geolocation consensus was confirmed across multiple sources.
OWNERSHIP & NETWORK ATTRIBUTES
The IP is registered under ASN 8899 (DGNO Role account) and operates within the ORTSNETZ-FTTH-DYNAMIC network classification, indicating residential fiber-to-the-home infrastructure. The address is part of the BGP prefix 94.31.114.0/23. Network classification flags indicate the IP is firewalled with no active services.
THREAT INDICATORS
No malicious threat indicators were identified. The IP was not listed on known blacklists, was not identified as a Tor exit node, was not flagged as a spam source, and was not associated with any known attack campaigns. The blacklist count remained at zero across all threat feeds.
NEIGHBORHOOD ANALYSIS
Analysis of the /24 subnet (94.31.115.0/24) revealed low neighborhood risk. The subnet exhibited an abuse density of 0.5 and was classified as "mostly_clean." Two sibling IPs were observed within the subnet:
- 94.31.115.63: Risk score 25, Authority score 50
- 94.31.115.169: Risk score 25, Authority score 50
Both neighbors exhibited low-risk profiles, consistent with the target IP.
OBSERVATION HISTORY
Seventeen signal observations were recorded for this IP. The most recent observations indicated:
- Subnet classification: "mostly_clean" with 50% abuse density
- No ownership changes detected
- No persistent malicious activity observed
- Threat observation count: 1 (transient)
SERVICES & DNS
No open ports were detected. DNS analysis revealed no forward resolution, no PTR hostnames, and zero hosted domains. No email authentication records (SPF, DMARC) were present.
SECURITY ACTIONS
No specific firewall rules or blocking actions were recommended based on the risk profile. The IP presents minimal threat to network security operations.
SUMMARY
IP 94.31.115.85 represents a low-risk residential endpoint within a German FTTH network infrastructure. No malicious activity or threat indicators were observed. The IP requires no special handling from SOC operations.
Rating: Low Risk โ No Immediate Action Required
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | DGNO Role account |
| ASN | AS8899 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | RIPE |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 19% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-07 23:04:44 UTC |
| Last Seen | 2026-06-24 01:59:19 UTC |
| Profile Built | 2026-06-24 02:19:50 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 25 |
Full dossier details are available via our API.