# 209.87.169.124 — IP Intelligence Summary

209.87.169.124 is an IPv4 address operated by Private Customer (AS62240), geolocated to Jersey City, United States. As of October 4, 2026, IPDebrief rates it Moderate Risk (60/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/209.87.169.124
- Last updated: 2026-10-04

## Ownership

- Organization: Private Customer
- Network name: NET-209-87-169-0-24
- Allocated block: 209.87.169.0/24
- ASN: AS62240 (https://ipdebrief.com/asn/62240)
- Regional registry: ARIN

## Location

- City: Jersey City
- Region: NJ
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (60/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IP Intelligence Briefing: 209.87.169.124/32

**Classification:** Low Risk | **Risk Score:** 25/100 | **Report Date:** 2026-07-29

\---

\### Executive Summary

IP 209.87.169.124 is classified as a Low Risk endpoint belonging to a private customer organization within the 209.87.169.0/24 subnet (ASN 62240). The IP currently exhibits no active threat indicators, maintains no open services, and demonstrates minimal network-level risk. However, a geographic data discrepancy requires monitoring.

\---

\### Network Profile

\- **Organization:** Private Customer (NET-209-87-169-0-24)

\- **ASN:** 62240 (Comcast)

\- **Registration:** ARIN (United States)

\- **Geolocation:** Jersey City, New Jersey (US)

\- **Network Role:** Firewalled / No Services

\- **Control Plane Status:** Route unstable (isRouteStable: false)

\---

\### Threat Indicators

\- **Blacklist Count:** 0 (Active), 1 DNSBL listing (historical)

\- **Abuse Confidence Score:** Not applicable (null)

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Active Threat Feeds:** None correlated

\- **Associated Campaigns:** None identified

**Observation:** The IP maintains a clean threat profile with no active malware signatures, botnet associations, or command-and-control communications observed.

\---

\### Neighborhood Analysis (209.87.169.0/24)

\- **Subnet Abuse Density:** 0.0763 (Low)

\- **Total Siblings:** 131 IPs

\- **Active Siblings:** 82

\- **Threat Siblings:** 10

\- **Risk Distribution:** High: 0, Medium: 1, Low: 93

\- **Classification:** mostly_clean

**Assessment:** The /24 subnet demonstrates minimal abuse concentration. Of 131 sibling IPs, only 10 have been flagged as threats, suggesting the broader network environment is well-controlled.

\---

\### Service & Port Analysis

\- **Open Ports:** None detected

\- **TLS Certificates:** Not present

\- **HTTP Services:** No active web services

\- **DNS Resolution:** No forward resolution

\- **PTR Records:** None

\- **Email Authentication:** SPF/DMARC not configured (no mail services observed)

**Note:** The endpoint appears to be firewalled with no public-facing services, consistent with a residential or private customer connection.

\---

\### Historical Activity (16 Observations)

Recent signal activity includes:

\- **2026-07-29 06:07:** Port scanning activity detected

\- **2026-07-29 06:05:** Subnet abuse density analysis (0.0763)

\- **2026-07-29 06:04:** Network classification (not CDN/Cloud/VPN/Proxy)

\- **2026-07-29 06:02:** Ownership and threat persistence tracking

\- **2026-07-29 06:02:** Geolocation data recorded (Hong Kong entry noted in historical record)

**Anomaly:** Geographic discrepancy detected between current US classification and historical Hong Kong geolocation data. RTT analysis indicates a 5971.6km distance with a 24ms RTT, violating the minimum possible RTT of 119.4ms for that distance. This suggests either data spoofing, misconfigured geolocation databases, or potential IP reputation manipulation.

\---

\### Relationship Graph

\- **Same Network:** NET-209-87-169-0-24 (3 entries)

\- **External Relationships:** None identified

\- **Associated Hostnames:** None

\- **Related Certificates:** None

\---

\### Recommended Actions

**Immediate:**

1. **Monitor Geographic Discrepancy:** Track geolocation data for this IP. The US/Hong Kong mismatch warrants continued observation to determine if this represents legitimate routing complexity or potential spoofing.

2. **Review Historical DNSBL Listing:** Investigate why the IP appears in 1 of 8 DNSBL lists despite current clean status.

**Standard:**

3. **No Blocking Required:** The IP maintains a Low Risk classification (score: 25) with no active threat indicators. No firewall blocking is recommended.

4. **Continue Neighborhood Monitoring:** Monitor the 209.87.169.0/24 subnet for the 10 flagged threat siblings.

**Firewall Rules:**

\- No specific deny/allow rules recommended

\- Standard outbound traffic monitoring applies

\- Consider blocking if inbound connection attempts originate from this IP

\---

\### Conclusion

IP 209.87.169.124 represents a low-risk endpoint with no current malicious activity. The primary concern is the geographic data inconsistency between current (US) and historical (Hong Kong) records, which should be tracked but does not currently warrant defensive action. The subnet environment remains clean with minimal abuse concentration.

## Nearby addresses

- 209.87.169.2 (https://ipdebrief.com/209.87.169.2)
- 209.87.169.4 (https://ipdebrief.com/209.87.169.4)
- 209.87.169.5 (https://ipdebrief.com/209.87.169.5)
- 209.87.169.7 (https://ipdebrief.com/209.87.169.7)
- 209.87.169.8 (https://ipdebrief.com/209.87.169.8)
- 209.87.169.9 (https://ipdebrief.com/209.87.169.9)
- 209.87.169.10 (https://ipdebrief.com/209.87.169.10)
- 209.87.169.11 (https://ipdebrief.com/209.87.169.11)
- 209.87.169.12 (https://ipdebrief.com/209.87.169.12)
- 209.87.169.13 (https://ipdebrief.com/209.87.169.13)
- 209.87.169.14 (https://ipdebrief.com/209.87.169.14)
- 209.87.169.15 (https://ipdebrief.com/209.87.169.15)

---

Source: IPDebrief, "209.87.169.124 IP intelligence", https://ipdebrief.com/209.87.169.124, updated 2026-10-04. Assessments are probabilistic.
