IP Intelligence Briefing: 87.78.223.244
Date: 2026-06-06
---
**1. Core Profile**
- Risk Score: 40 (Moderate Risk)
- Ownership:
- ASN: 8422 (NetCologne, Germany)
- ISP: NetCologne
- Location: Cologne, North Rhine-Westphalia, Germany (51.17°N, 10.45°E)
- Network Classification: Firewalled / No Services (no open ports, TLS, or HTTP detected)
- Threat Indicators: No malicious activity, spam, or known attacker associations.
---
**2. Observation History**
- Recent Activity:
- Geolocation confirmed (MaxMind, 2026-06-05).
- Network ownership stable (ASN 8422, 2005-05-31 allocated).
- Subnet abuse density: 1 (low risk).
- Persistence: No persistent malicious behavior detected (threat observation count: 1).
---
**3. Relationships & Context**
- DNS:
- PTR record: `xdsl-87-78-223-244.nc.de` (owned by NetCologne).
- No email authentication (SPF/DKIM) detected.
- Network:
- Subnet: `87.78.223.244/24` (classified as "mostly_clean").
- Linked to `NC-DIAL-IN-POOL` (NetCologne's dial-in pool).
---
**4. Neighborhood Analysis**
- Subnet: `87.78.223.244/24`
- Neighbor Risk: 0 active/threatened IPs in subnet (abuse density: 0).
- Isolation: No neighboring IPs reported, suggesting a standalone or minimally active host.
---
**5. Recommendations**
- Monitoring: Track DNS resolution and network traffic for unexpected changes.
- Firewall: No immediate action required due to low risk profile.
- Validation: Confirm geolocation plausibility via additional probes (RTT, traceroute).
Conclusion: This IP is a residential/business connection with no active threats. Focus on ensuring DNS legitimacy and monitoring for anomalies.
---
*Generated by IPDebrief intelligence tools.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Administrator Contact NetCologne |
| ASN | AS8422 |
| Network Name | NC-DIAL-IN-POOL |
| CIDR Block | 87.78.132.0/22 |
| RIR | RIPE |
| Country | DE |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | xdsl-87-78-223-244.nc.de |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | xdsl-87-78-223-244.nc.de |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 1/8 domains |
| DMARC | 1/8 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 8 domains |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | โ |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | boekiroot.dynv6.net798hjgs33rbk1rds.myfritz.netfritz.boxwww.fritz.boxfritzbox.internalfritzbox.home.arpamyfritz.boxwww.myfritz.boxBoekiRootfritz.nas |
| Valid From | 1970-01-01T00:00:50+00:00 |
| Valid Until | 2038-01-16T00:00:50+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 24852 days |
| Serial Number | 3D6CB986276F2B66FCF513C86F1976851CBA9213 |
| Thumbprint | AD108AE119AC1E8E704BE56ECD93DCCD7D9CFA12 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 24% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 19% | 2 | 2 |
| Overall | 21% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-12 03:44:32 UTC |
| Last Seen | 2026-06-26 15:37:51 UTC |
| Profile Built | 2026-06-26 15:44:24 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 29 |
Full dossier details are available via our API.