87.250.224.105📋 Copy

Threat Intelligence Briefing for IP 87.250.224.105

1. IP Profile

• Risk Rating: Low Risk (Risk Score: 0, Provider/Authority Scores: 0).
• Ownership: Registered to YANDEX LLC (ASN: N/A, CIDR: 87.250.224.0/24).
• Geolocation: Russia (RU), Region: Leo, City: Russian Federation (latitude: 55.74, longitude: 37.61).
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services, no DNS records).
• Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).

2. Observation History

• Activity Trends: Minimal observed activity over the last 30 days.
• Stability: No persistent threats or ownership changes.
• Geolocation Consistency: Plausible Russian Federation origin, but no recent geolocation updates.

3. Relationships

• Network Connections: Linked to YANDEX’s subnet (87.250.224.0/24).
• No External Threat Links: No connections to known malicious domains, organizations, or certificates.

4. Neighborhood Analysis

• Subnet (87.250.224.0/24):

- Abuse Density: 0% (low risk).

- Neighbor IPs: 20 total, with 12 low-risk (score 0) and 8 medium-risk (scores 25–50). Notable medium-risk neighbors include:

- 87.250.224.91 (score 25), 87.250.224.93 (score 25), 87.250.224.127 (score 25), 87.250.224.205 (score 25), 87.250.224.209 (score 25).

• Actionable Insight: Monitor medium-risk neighbors for potential lateral movement or network compromise.

5. Recommendations

• SOC Actions:

- No immediate blocking required for 87.250.224.105, but monitor its subnet for unusual activity.

- Investigate medium-risk neighbors (e.g., 87.250.224.91, 87.250.224.205) for potential threats.

- Verify YANDEX’s network segmentation to ensure no internal exposure.

Conclusion: This IP is associated with a legitimate entity and shows no malicious behavior. However, its subnet contains some medium-risk IPs that warrant further scrutiny.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.