87.236.176.94📋 Copy

IP Intelligence Briefing: 87.236.176.94

Date: 2026-05-29

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Owner: Driftnet Hostmaster (RIPE, ASN 211298)
• Geolocation: London, GB (55.38°N, -3.44°E)
• Network Role: Firewalled / No Services (no open ports, no TLS/http detected)
• Threat Indicators: No known malware, spam, or attack campaigns linked.

---

**2. Observation History**

• Last 30 Days:

- Stable geolocation in London, GB (confidence: 52%).

- Operator score: "Basic" (0.26).

- No persistent malicious activity or threat persistence.

- DNSSEC valid, but listed on 2 DNSBLs (low-severity).

---

**3. Network Relationships**

• Subnet: 87.236.176.0/24 (Driftnet Hostmaster)
• Key Associations:

- DNS: `r3-94-5e.monitoring.internet-measurement.com` (PTR record).

- Network: UK-DRIFTNET-20050831 (same network as 179 IPs).

• Threat Context: No direct malicious links, but subnet has 66 "threat" siblings.

---

**4. Subnet Neighborhood**

• Subnet Abuse Density: 4% (low).
• Neighbor Risk Scores:

- 4 IPs with high risk (40–55).

- 75 medium-risk IPs (40–60).

- 21 low-risk IPs (0–50).

• Notable Neighbors:

- 87.236.176.2, 3, 4, 5 (medium risk).

- 87.236.176.6 (no risk).

---

**5. Actionable Insights**

• SOC Recommendations:

- Monitor traffic to/from this subnet for anomalies, given mixed risk profile.

- Investigate DNS associations with `internet-measurement.com` for potential probing or testing.

- Watch neighboring IPs with higher risk scores (e.g., 87.236.176.2–5).

• No Immediate Mitigation Needed: IP shows no direct malicious activity.

---

Source: IPDebrief Threat Intelligence Platform.

Note: This IP is likely part of a network used for internet measurement or research, with no direct threat detected.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.