# IP Intelligence Briefing: 87.197.92.143
## Executive Summary
IP 87.197.92.143 presents as a low-risk infrastructure endpoint associated with SK-TELECOM-20050629 (ASN 6855). Current risk assessment scores 25 (Low Risk) with no active threat indicators detected. The IP is firewalled with no open services and resides in a clean subnet environment with no abusive neighbors.
## Ownership and Network Classification
- ASN: 6855 (Jan Katuska)
- Network Block: 87.197.0.0/16
- Network Name: SK-TELECOM-20050629
- RIR: RIPE
- Geolocation: US, Newark, NJ (Note: hostname indicates Slovakian origin)
- Service Classification: Firewalled / No Services
- Ownership Stability: Stable (0 ownership changes recorded)
## Threat Intelligence Findings
- Risk Score: 25 (Low Risk)
- Abuse Confidence: Not elevated
- Threat Indicators: None detected
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Count: 0 (DNSBL: 1/8 lists)
- Known Campaigns: None
- Threat Persistence: 0 days
## Network Services and Infrastructure
- Open Ports: None detected
- TLS Certificate: None
- HTTP Title: None
- Server Banner: None
- Certificate Authority: None
- DNS Resolution: Forward confirmed (1 PTR record)
- PTR Hostname: edunet-static-143.87-197-92.telecom.sk
- Email Authentication: SPF and DMARC configured
## Neighborhood Analysis (87.197.92.0/24)
- Abuse Density: 0
- Subnet Classification: Clean
- Total Siblings: 2
- Active Threat Siblings: 0
- Sibling IP Risk: 87.197.92.138 (Risk Score: 15)
## Observation History Summary
- Total Observations: 17 signals
- Latest Activity: 2026-07-28
- Geolocation Consensus: False (942.5km discrepancy from claimed location)
- Ownership Changes: 0
- Malicious Activity: None observed
- Geolocation Validation: ICMP blocked - unable to validate
## Associated Entities
- DNS Associations: edunet-static-143.87-197-92.telecom.sk
- Network Relationships: SK-TELECOM-20050629 (duplicate entries in relationship graph)
## Recommended Security Actions
No immediate blocking or rate-limiting actions recommended. The IP demonstrates benign infrastructure characteristics consistent with static hosting or datacenter endpoints. Monitor for any changes in service availability or threat indicator emergence.
## Intelligence Assessment
This IP address represents routine infrastructure with no active malicious indicators. The geographic discrepancy between the registered network (Slovakia) and geolocation data (US) may indicate CDN or hosting infrastructure. The subnet exhibits clean neighborhood characteristics with minimal abuse density. SOC analysts should maintain standard monitoring without elevated threat posture.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Jan Katuska |
| ASN | AS6855 |
| Network Name | SK-TELECOM-20050629 |
| CIDR Block | 87.197.0.0/16 |
| RIR | RIPE |
| Country | SK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | edunet-static-143.87-197-92.telecom.sk |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | edunet-static-143.87-197-92.telecom.sk |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS6855 |
| Network Prefix | 87.197.0.0/16 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 23% | 2 | 4 |
| reputation | 20% | 1 | 3 |
| geolocation | 12% | 2 | 2 |
| Overall | 16% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-16 16:44:39 UTC |
| Last Seen | 2026-09-05 20:43:13 UTC |
| Profile Built | 2026-09-05 20:53:43 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 27 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 87.197.92.143
Who owns the IP address 87.197.92.143?
87.197.92.143 is registered to Jan Katuska. The address falls within the 87.197.0.0/16 network block. Registration is held at RIPE.
Where is 87.197.92.143 located?
Geolocation data places 87.197.92.143 in Newark, US-NJ, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 87.197.92.143 malicious or safe?
87.197.92.143 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 87.197.92.143?
The reverse DNS (PTR) record for 87.197.92.143 is edunet-static-143.87-197-92.telecom.sk. This hostname is forward-confirmed, meaning it resolves back to the same address.