87.250.224.233📋 Copy

# IP Intelligence Briefing: 87.250.224.233/32

## Executive Summary

Intellectual property 87.250.224.233 is a low-risk Yandex infrastructure address located in Moscow, Russia. The IP exhibits clean reputation characteristics with no active threat indicators. Recommended classification: MONITOR

---

## Ownership & Classification

• Organization: YANDEX LLC
• Network Block: 87.250.224.0/24 (YANDEX-87-250-224-0)
• Geolocation: Russia (RU), Moscow (Tsentralnyy administrativnyy okrug)
• DNS Resolution: 87-250-224-233.spider.yandex.com
• Network Role: Firewalled / No Services Detected
• Risk Score: 25 (Low Risk)

---

## Threat Assessment

• Abuse Confidence Score: Not applicable
• Blacklist Status: Clean (0 listings across 8 DNSBLs)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Correlation: None detected
• Threat Persistence: No persistent malicious activity observed

---

## Infrastructure Analysis

• Open Ports: None
• HTTP/TLS Services: None detected
• SSL Certificate: Not present
• Network Classification: Provider infrastructure with no public-facing services

---

## Subnet Neighborhood (87.250.224.0/24)

• Total Subnet Siblings: 65 IPs
• Active Siblings: 16
• Threat Siblings: 2 (low threat presence)
• Abuse Density: 0.0308 (clean subnet)
• Risk Classification: Clean
• Inherited Risk: 1

Notable Neighbors:

• 87.250.224.2: Risk Score 25, Authority Score 60
• 87.250.224.3: Risk Score 25, Authority Score 60
• 87.250.224.5: Risk Score 25, Authority Score 60
• 87.250.224.7: Risk Score 0, Authority Score 50

---

## Relationship Graph

• DNS Associations: 87-250-224-233.spider.yandex.com (multiple records)
• Network Associations: YANDEX-87-250-224-0 (confirmed)
• Total Relationships: 9 (all DNS and network-based)

---

## Historical Signal Analysis

• Total Observations: 19 signals
• Most Recent: 2026-07-23T02:18:48 UTC
• Geolocation Consistency: Confirmed Russia (61.52°N, 105.32°E)
• Ownership Stability: No changes detected
• Threat Evolution: No escalation in risk profile over observation period

---

## Technical Evidence

• PTR Records: 87-250-224-233.spider.yandex.com
• Forward DNS: Confirmed (1 hostname)
• Email Auth: SPF and DMARC records present
• DNSSEC: Valid
• CAA Records: Present
• BGP Stability: Not stable (route changes detected)
• ICMP Validation: Blocked (unable to validate via ICMP)

---

## Recommended Actions

No immediate firewall rules or blocking actions recommended. The IP demonstrates legitimate Yandex infrastructure characteristics with no malicious indicators.

Suggested Handling:

• Allow traffic if policy permits
• Continue monitoring for any reputation changes
• No isolation or blocking required

---

## Intelligence Assessment

The target IP represents Yandex's spider/crawler infrastructure operating from Moscow. The address exhibits standard infrastructure behavior with no threat indicators. The subnet demonstrates a clean security posture with minimal threat presence (2 of 65 siblings flagged as threats). This IP should be classified as low-risk legitimate infrastructure.

Classification: LOW RISK - INFRASTRUCTURE

Priority: LOW

Action: MONITOR

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.