IPDebrief

94.31.115.85

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

INTELLIGENCE BRIEFING: 94.31.115.85/32

Date: 2026-06-03

IP Address: 94.31.115.85/32

Classification: Low Risk

---

OVERVIEW

The IP address 94.31.115.85 was classified as "Low Risk" with an overall risk score of 25/100. The address was geolocated to Dußlingen, Baden-Württemberg, Germany (DE), with coordinates 51.17°N, 10.45°E and a timezone of Europe/Berlin. Geolocation consensus was confirmed across multiple sources.

OWNERSHIP & NETWORK ATTRIBUTES

The IP is registered under ASN 8899 (DGNO Role account) and operates within the ORTSNETZ-FTTH-DYNAMIC network classification, indicating residential fiber-to-the-home infrastructure. The address is part of the BGP prefix 94.31.114.0/23. Network classification flags indicate the IP is firewalled with no active services.

THREAT INDICATORS

No malicious threat indicators were identified. The IP was not listed on known blacklists, was not identified as a Tor exit node, was not flagged as a spam source, and was not associated with any known attack campaigns. The blacklist count remained at zero across all threat feeds.

NEIGHBORHOOD ANALYSIS

Analysis of the /24 subnet (94.31.115.0/24) revealed low neighborhood risk. The subnet exhibited an abuse density of 0.5 and was classified as "mostly_clean." Two sibling IPs were observed within the subnet:

Both neighbors exhibited low-risk profiles, consistent with the target IP.

OBSERVATION HISTORY

Seventeen signal observations were recorded for this IP. The most recent observations indicated:

SERVICES & DNS

No open ports were detected. DNS analysis revealed no forward resolution, no PTR hostnames, and zero hosted domains. No email authentication records (SPF, DMARC) were present.

SECURITY ACTIONS

No specific firewall rules or blocking actions were recommended based on the risk profile. The IP presents minimal threat to network security operations.

SUMMARY

IP 94.31.115.85 represents a low-risk residential endpoint within a German FTTH network infrastructure. No malicious activity or threat indicators were observed. The IP requires no special handling from SOC operations.

Rating: Low Risk โ€” No Immediate Action Required

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฉ๐Ÿ‡ช Germany
RegionSH
CityOEring
TimezoneEurope/Berlin
Latitude51.17
Longitude10.45

๐Ÿข Ownership & Registration

OrganizationDGNO Role account
ASNAS8899
Network Nameโ€”
CIDR Blockโ€”
RIRRIPE
Countryโ€”
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierUnknown โ€” Insufficient routing data to classify
No specific classification

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
24
routing
13%
11
services
15%
22
ownership
24%
23
reputation
22%
13
geolocation
19%
22
Overall19%1015
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-07 23:04:44 UTC
Last Seen2026-06-24 01:59:19 UTC
Profile Built2026-06-24 02:19:50 UTC
Data FreshnessLive
Signal Types19
Total Observations25
๐Ÿ” 19 signal types ยท 25 observations collected
This report is generated from 19+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.