87.253.233.169📋 Copy

# IP Intelligence Briefing: 87.253.233.169/32

## Executive Summary

IP address 87.253.233.169 was assessed as a Moderate Risk endpoint with a risk score of 40. The address was associated with legitimate mail infrastructure for Mailjet (AS200069) in Paris, France. No active services or open ports were detected, and the IP was not classified as a known attacker or Tor exit node.

## Ownership and Geolocation

Ownership records indicated the IP belonged to the MNT-MAILJET organization within the RIPE registry. Geolocation data confirmed the location as Paris, France, with a consensus across three sources. The IP was registered under the CIDR block 87.253.233.0/24.

## Threat Indicators and Risk

The IP was listed on 8 DNSBLs, including 2 explicit listings, despite having a blacklisting count of 0 for active blacklists. No specific threat indicators, campaigns, or attacker classifications were observed. The subnet neighborhood showed an abuse density of 0.5, with one sibling IP (87.253.233.165) flagged as a threat. Historical data showed no persistent malicious behavior over the observation period.

## Network Role and DNS

DNS analysis confirmed the forward resolution to o169.p8.mailjet.com. The domain configuration included valid SPF and DMARC records, and DNSSEC was validated. No HTTP or TLS services were open. The service purpose was identified as Firewalled with no services.

## Recommendations

Given the Moderate Risk classification and DNSBL presence, analysts were advised to rate-limit traffic rather than immediately block the IP. Suggested firewall rules included iptables, nginx, and pf configurations to limit packets to 5 per minute. SOC teams were instructed to monitor for email-based activity originating from this address and maintain a defensive posture.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.