87.195.114.193📋 Copy

# IP INTELLIGENCE BRIEFING: 87.195.114.193/32

## Executive Summary

IP address 87.195.114.193 is a low-risk residential/business DSL endpoint operated by Solcon Netherlands. The IP shows no malicious activity, no service exposure, and zero threat indicators. It is classified as a firewalled endpoint with no open ports.

## Technical Profile

Ownership & Network:

• ASN: 12414 (SOLCON-NL-MNT)
• Organization: Solcon_xDSL_Bitstream (Solcon Netherlands)
• CIDR Block: 87.195.114.0/23
• RIR: RIPE
• Network Classification: Residential FTTH (Fiber to the Home)

Geolocation:

• Country: Netherlands (NL)
• Region: Gelderland / Amsterdam area
• City: Doornspijk (primary), Amsterdam area (52.41°N, 5.82°E)
• Coordinates: 52.13°N, 5.29°E
• Timezone: Europe/Amsterdam

DNS Configuration:

• PTR Hostname: ftth-087-195-114-193.solcon.nl
• Forward Resolution: Confirmed (1 hostname)
• Email Authentication: SPF enabled, DMARC configured

Network Role:

• Service Status: Firewalled / No Services Detected
• Open Ports: None
• TLS Certificates: None
• HTTP Services: None

## Threat Assessment

Risk Profile:

• Risk Score: 0.0 (Low Risk)
• Abuse Confidence Score: Not applicable (no activity)
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Threat Indicators:

• Campaigns: None detected
• Threat Feeds: Empty
• Malicious Activity: No observations

## Observation History

Total Observations: 18

Recent Activity Summary:

• Geolocation Validation: Netherlands confirmed across multiple signals
• Network Stability: No ownership changes detected
• Threat Persistence: 0 days (no persistent threat behavior)
• RTT Measurements: 108-120ms average (consistent with European location)
• Malicious Classification: Not persistently malicious

Temporal Indicators:

• Threat Observation Count: 0
• Is Persistently Malicious: False
• Route Stability: False (dynamic routing observed)

## Relationship Analysis

Identified Relationships:

1. Same Network: Solcon_xDSL_Bitstream (2 instances)

2. DNS Association: ftth-087-195-114-193.solcon.nl (2 instances)

No external entity associations detected (no associated hostnames, organizations, or certificates beyond DNS PTR).

## Neighborhood Analysis

Subnet: 87.195.114.193/24

Neighborhood Metrics:

• Neighbor Count: 0 (no sibling IPs detected)
• Abuse Density: 0.0 (clean subnet)
• High Risk Siblings: 0
• Medium Risk Siblings: 0
• Low Risk Siblings: 0

Conclusion: The subnet appears to be residential with no concentrated abuse activity.

## Security Recommendations

Actionable Rules:

No blocking or rate-limiting recommended. The IP represents a standard residential endpoint with no observed malicious activity.

SOC Guidance:

• Block: Not recommended
• Monitor: Standard monitoring only
• Investigate: No immediate investigation required
• Whitelist Consideration: May be appropriate for Netherlands-based residential traffic

## Intelligence Notes

This IP address represents a typical Solcon Netherlands residential FTTH connection. The hostname pattern (ftth-XXX-XXX-XXX) is consistent with Solcon's FTTH numbering scheme. The geographic data shows Amsterdam-area coordinates, which is plausible for Netherlands ISP infrastructure. No threat intelligence sources have flagged this address.

Classification: Low Risk - Residential Endpoint

Threat Level: None

Recommended Action: No action required

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.