IPv4 address

87.237.217.231(DE)AS12337

Last fetched Thu, 21 May 2026 19:33:57 GMT

87.237.217.231 is announced by AS12337 (NORIS-NETWORK IT Service Provider located in Nuernberg, Germany), located in Herzogenaurach, DE, DE.

Nutrition Label

Attribution

Registered prefix: 87.237.216.0/21
Announced prefix: 87.237.216.0/23
Announcing ASN: AS12337
Operator: NORIS-NETWORK IT Service Provider located in Nuernberg, Germany
Drift: Registered prefix 87.237.216.0/21 differs from announced prefix 87.237.216.0/23 — RIR allocation does not match current BGP routing. This is a signal worth investigating during incident response.

Anycast detection

No anycast signal detected. Reverse DNS resolves to 50 hostnames; announced prefix is /23; announcing ASN peers with 38 other networks (anycast floor is 10).

Reverse DNS

50 hostnames observed pointing at 87.237.217.231.

Threat posture

Geographic detail

City: Herzogenaurach, DE
Country: DE

History

Pivot deeper into the graph from 87.237.217.231.

Cypher and MCP

Reproduce the IP profile directly against graph.whisper.security:

MATCH (ip:IPV4 {name: "87.237.217.231"})
OPTIONAL MATCH (ip)-[:BELONGS_TO]->(rp:REGISTERED_PREFIX)
OPTIONAL MATCH (ip)-[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
                    -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
OPTIONAL MATCH (ip)-[:LOCATED_IN]->(city:CITY)
OPTIONAL MATCH (ip)-[:HAS_COUNTRY]->(country:COUNTRY)
RETURN ip.name AS ip,
       rp.name AS registered_prefix,
       ap.name AS announced_prefix,
       asn.name AS asn,
       n.name AS network,
       city.name AS city,
       country.name AS country

Or query Whisper from your own LLM workflow via the Whisper MCP server.