87.79.65.137📋 Copy

IP Intelligence Briefing: 87.79.65.137

Date: 2026-06-10

---

**1. Core Profile**

• Risk Score: 50 (Moderate Risk)
• Ownership: NetCologne (Germany, Cologne) – ASN 8422, RIPE-registered.
• Geolocation: Cologne, Germany (50.94°N, 6.96°E).
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services).
• DNS: PTR record `static-87-79-65-137.netcologne.de` with SPF/DMArc validation.

---

**2. Threat Observations**

• Historical Signals (Last 30 Days):

- Listed in 8 threat feeds (1 high-severity, 7 medium).

- BGP prefix `87.78.0.0/15` (NetCologne) confirmed.

- DNSSEC valid, no CAA records.

- No active malware, phishing, or exploit indicators.

• Risk Trends: Stable with no recent changes in threat signals.

---

**3. Network Relationships**

• DNS Associations:

- Linked to `static-87-79-65-137.netcologne.de` (repeated DNS records).

• Network Subnet:

- Part of `NC-STATIC-IP-POOL` (NetCologne’s static IP range).

• No External Threat Links: No correlated IPs, campaigns, or certificates detected.

---

**4. Neighborhood Analysis**

• Subnet: `87.79.65.137/24` (no active neighbors reported).
• Abuse Density: 0% (clean subnet).
• BGP Stability: Route stable with no recent changes.

---

**5. Recommendations**

• Monitoring: No immediate action required; monitor for new threat signals.
• DNS Security: Ensure SPF/DMArc alignment with `netcologne.de` for email security.
• Network Segmentation: Verify firewalled status to prevent unintended exposure.

Conclusion: This IP is a static residential/netblock IP from a German ISP with no current malicious activity. Moderate risk score likely reflects historical passive observations. No urgent mitigation required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.