87.245.233.136
Subject: 87.245.233.136/32
Executive Summary
The subject IP was observed with a Low Risk reputation score of 25. Ownership records attribute the address to Dmitry Samarin (ASN 9002) under the RIPE NCC.
Technical Profile
Network scans indicated no open ports, with the service purpose classified as Firewalled. DNS PTR records resolved to ae4-7.rt.dpx.bud.hu.retn.net. Forward confirmation was unsuccessful.
Geolocation and Routing
Geolocation data assigned the address to Budapest, HU, though consensus sources disagreed between HU and US. RTT physics analysis flagged a violation, recording 108ms against a minimum possible 207.7ms for the claimed distance of 10,382km. Route stability remained inconsistent during the observation window.
Threat Assessment
Threat feeds returned no specific indicators. The IP was listed on one DNSBL out of eight total lists. Neighborhood analysis identified 2 threat siblings within the /24 subnet, despite the subnet classification being mostly clean. No known campaigns were correlated.
Recommendation
Analysts should Monitor the address for changes in behavior or classification. Signal contradictions present in the geolocation and routing data suggest the need for continued observation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Dmitry Samarin |
| ASN | AS9002 |
| Network Name | UK-RETN-20050824 |
| CIDR Block | 87.245.208.0/20 |
| RIR | RIPE |
| Country | GB |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ae4-7.rt.dpx.bud.hu.retn.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | free.retn.netae4-7.rt.dpx.bud.hu.retn.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 7 |
| routing | 13% | 1 | 1 |
| services | 35% | 2 | 3 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 33% | 2 | 5 |
| Overall | 29% | 10 | 25 |
| Data Coherence | Mixed Signals (60%) — 2 contradiction(s) |
| Attribution | Very Low (20%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: US, HU
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-08 23:45:47 UTC |
| Last Seen | 2026-09-27 10:27:05 UTC |
| Profile Built | 2026-09-27 10:36:10 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 41 |
Full dossier details are available via our API.