87.245.234.187
Intelligence Briefing: 87.245.234.187/32
Network and Ownership
The IP belonged to ASN 9002, owned by Dmitry Samarin under the RIPE registry block 87.245.208.0/20. Routing data identified the origin as BGP prefix 87.245.224.0/19.
Technical Findings
The host presented as firewalled with no open ports or services detected. DNS resolution returned ae2-4.rt.cly.tpe.tw.retn.net. The domain maintained SPF and DMARC records, yielding a DNS hygiene score of 60. Threat analysis flagged the host as suspicious but found no specific campaign correlations or known attacker indicators.
Geolocation and Risk
Geographic data indicated Taipei, TW, though sources conflicted with GB and US. This discrepancy resulted in a low confidence score of 0.225. Control plane analysis showed route instability and one DNSBL listing out of eight total lists. Neighborhood analysis classified the /24 subnet as mostly clean with five threat siblings among 26 active peers.
Recommendation
The overall risk score was 25 (Low Risk). Signal contradictions prevented definitive classification, leading to a recommendation to monitor the address for potential changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Dmitry Samarin |
| ASN | AS9002 |
| Network Name | UK-RETN-20050824 |
| CIDR Block | 87.245.208.0/20 |
| RIR | RIPE |
| Country | GB |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ae2-4.rt.cly.tpe.tw.retn.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | ae2-4.rt.cly.tpe.tw.retn.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-22 18:57:04 UTC |
| Last Seen | 2026-09-27 08:05:32 UTC |
| Profile Built | 2026-09-27 08:20:25 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 29 |
Full dossier details are available via our API.