# 209.87.169.87 — IP Intelligence Summary

209.87.169.87 is an IPv4 address operated by Private Customer (AS62240), geolocated to Jersey City, United States. As of November 5, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/209.87.169.87
- Last updated: 2026-11-05

## Ownership

- Organization: Private Customer
- Network name: NET-209-87-169-0-24
- Allocated block: 209.87.169.0/24
- ASN: AS62240 (https://ipdebrief.com/asn/62240)
- Regional registry: ARIN

## Location

- City: Jersey City
- Region: New Jersey
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 209.87.169.87/32

\## Executive Summary

IP 209.87.169.87 presents as a low-risk address with a risk score of 20. The address operates within a mostly clean subnet (209.87.169.0/24) with minimal abuse density and no active threat indicators. Current posture indicates minimal threat to defensive operations.

\## Ownership and Infrastructure Profile

\- **ASN:** 62240 (Private Customer)

\- **Network:** NET-209-87-169-0-24

\- **ISP/Provider:** Comcast

\- **Registrant:** Private Customer

\- **Geolocation:** US, New Jersey, Jersey City (validation flagged as implausible)

\- **Service Status:** Firewalled / No Services

\- **Open Ports:** None detected

\## Threat Assessment

**Risk Score: 20 (Low Risk)**

Threat indicators are absent:

\- No blacklist entries (0/0)

\- Not a known attacker, spam source, or Tor exit node

\- No active campaigns or threat feed correlations

\- Abuse confidence score: Not available

Control plane analysis indicates route stability issues (isRouteStable: false), though no persistent malicious behavior observed.

\## Neighborhood Analysis

Subnet 209.87.169.0/24 demonstrates minimal abuse activity:

\- **Abuse Density:** 0.0763 (low)

\- **Subnet Classification:** mostly_clean

\- **Threat Siblings:** 10 out of 131 total siblings

\- **Inherited Risk:** 3 (minimal)

Risk distribution among 100 sampled neighbors:

\- High risk: 0

\- Medium risk: 1

\- Low risk: 93

Notable neighbors include 209.87.169.2, 209.87.169.4, and 209.87.169.5 (risk score 25, authority score 50).

\## Historical Observations

Analysis of 16 signal observations reveals:

\- Recent port scanning activity detected (2026-07-29T06:07:32)

\- Geolocation inconsistency: One observation reported Hong Kong; consensus location is New Jersey

\- Subnet abuse density remained stable at 0.0763 across observations

\- No persistent malicious activity detected

\- No ownership changes recorded

**Temporal Indicators:**

\- Threat persistence days: 0

\- Threat observation count: 0

\- Is persistently malicious: No

\## Network Relationships

Relationship graph contains only network-level associations:

\- 4 relationships to NET-209-87-169-0-24 (same network)

\- No relationships to hostnames, organizations, or certificates

\- No external infrastructure correlations

\## Recommendations

**Immediate Actions:**

\- **Monitor:** Continue baseline monitoring; no immediate blocking required

\- **Log:** Maintain logging for potential correlation with other subnet activity

\- **Geo-Validation:** Investigate geolocation discrepancy (RTT 23ms vs. minimum 119.4ms for reported distance)

**Defense Posture:**

\- No firewall rules recommended (low risk profile)

\- No WAF rules recommended

\- No DNS-based blocking required

**Intelligence Notes:**

\- Subnet shows minimal malicious activity; 10 threat siblings suggest isolated rather than coordinated abuse

\- Recent scanning activity warrants awareness but not immediate concern

\- Route stability issues may indicate transient infrastructure changes

\---

*Report generated: 2026-07-29*

*Classification: DEFENSIVE INTELLIGENCE*

*Status: LOW RISK - NO IMMEDIATE ACTION REQUIRED*

## Nearby addresses

- 209.87.169.2 (https://ipdebrief.com/209.87.169.2)
- 209.87.169.4 (https://ipdebrief.com/209.87.169.4)
- 209.87.169.5 (https://ipdebrief.com/209.87.169.5)
- 209.87.169.7 (https://ipdebrief.com/209.87.169.7)
- 209.87.169.8 (https://ipdebrief.com/209.87.169.8)
- 209.87.169.9 (https://ipdebrief.com/209.87.169.9)
- 209.87.169.10 (https://ipdebrief.com/209.87.169.10)
- 209.87.169.11 (https://ipdebrief.com/209.87.169.11)
- 209.87.169.12 (https://ipdebrief.com/209.87.169.12)
- 209.87.169.13 (https://ipdebrief.com/209.87.169.13)
- 209.87.169.14 (https://ipdebrief.com/209.87.169.14)
- 209.87.169.15 (https://ipdebrief.com/209.87.169.15)

---

Source: IPDebrief, "209.87.169.87 IP intelligence", https://ipdebrief.com/209.87.169.87, updated 2026-11-05. Assessments are probabilistic.
