80.87.198.10📋 Copy

# IP INTELLIGENCE BRIEFING: 80.87.198.10

Classification: Moderate Risk (Score: 40/100)

Date: 2026-07-29

Analysis Status: Complete

## EXECUTIVE SUMMARY

IP 80.87.198.10 is classified as a moderate-risk address associated with JSC Datacenter infrastructure in Moscow, Russia. The IP exhibits no active service exposure and maintains a clean subnet profile with zero observed abuse density. While the IP is listed on DNS blacklists (2 of 8 lists), no active threat indicators or known malicious campaigns were identified. Recommended defensive action is to block this address at perimeter controls.

## OWNERSHIP & INFRASTRUCTURE

Geolocation: Moscow, Russia (RU) — Coordinates: 55.75°N, 37.62°E

Network Role: Firewalled / No Services

Infrastructure Type: Datacenter Hosting

## THREAT PROFILE

Risk Assessment:

• Overall Risk Score: 40 (Moderate)
• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Proxy Service: No

DNS Blacklist Status:

• Listed on 2 of 8 monitored lists
• Operator Score: 0.2609 (Basic)

DNS Configuration:

• PTR Hostname: kucherov121.fvds.ru
• Forward Resolution: Confirmed
• SPF Record: Not configured
• DMARC Record: Not configured

## NETWORK BEHAVIOR

Service Exposure:

• Open Ports: None detected
• HTTP/HTTPS: No services running
• TLS Certificate: None

Control Plane:

• Route Changes (30d): 0
• Route Stability: False
• DNSSEC Valid: Yes
• IRR Consistency: Not evaluated

## OBSERVATION HISTORY

Analysis of 16 historical observations reveals:

• Classification: Clean (abuse density: 0)
• Subnet Risk: Inherited risk of 0
• Threat Persistence: 0 days
• Is Persistently Malicious: No

Recent geolocation probes indicate Moscow coordinates with 2,036.3 km distance validation. Geo-plausibility flags were inconsistent across probes.

## RELATIONSHIPS & NEIGHBORHOOD

Relationship Graph:

• DNS Associations: kucherov121.fvds.ru (2 entries)
• Network Association: RU-WEBDC

Subnet Analysis (80.87.198.0/24):

• Total Neighbors: 0
• Abuse Density: 0%
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0

The IP operates in an isolated subnet with no neighboring threats.

## RECOMMENDED ACTIONS

Block at Perimeter:

```bash

# iptables

iptables -A INPUT -s 80.87.198.10 -j DROP

# nftables

nft add rule inet filter input ip saddr 80.87.198.10 drop

# pfSense

80.87.198.10/32

# Cloudflare WAF

{"description":"Block 80.87.198.10 — IPDebrief risk score 40", "action":"block", "filter":{"expression":"ip.src eq 80.87.198.10"}}

# AWS WAF

{"Addresses":["80.87.198.10/32"], "Description":"IPDebrief risk 40"}

```

## ANALYST NOTES

This IP address is associated with a Russian datacenter provider but demonstrates no active malicious behavior. The moderate risk score (40) is primarily driven by DNS blacklist listings rather than observed attack activity. The subnet shows zero abuse density, suggesting this may represent a legacy or dormant infrastructure component. Block at perimeter controls and monitor for any changes in behavior.

Threat Level: LOW-MEDIUM

Action Required: Block

Priority: Routine

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.