5.0.2.71
# IP Intelligence Briefing: 5.0.2.71/32
Classification: Low Risk
Analysis Date: 2026-07-22
Primary Contact: SOC Operations Team
## Executive Summary
IP address 5.0.2.71 presents a low-risk profile (risk score: 25) with no active threat indicators. The address is firewalled with no open services detected and maintains a clean neighborhood classification within its /24 subnet. Geographic validation shows minor inconsistencies requiring monitoring.
## Ownership and Network Attribution
- ASN: 29256 (SY-ISP-TARASSUL)
- Organization: Firas Ahmad
- Netname: SY-ISP-TARASSUL
- RIR Registry: RIPE
- CIDR Block: 5.0.0.0/17
- Abuse Contact: Available via RDAP
## Geographic Validation
Geolocation data presents conflicting signals:
- Primary geolocation: Marseille, France (FR)
- Secondary geolocation: Damascus Governorate, Syria (SY)
- Geographic consensus: Inconsistent across sources
- Geographic plausible: False
## Threat Intelligence Findings
- Risk Score: 25 (Low Risk)
- Blacklist Status: 0 lists
- DNSBL Listings: 1 of 8 total lists (minor flag)
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Malicious Campaigns: None detected
- Threat Persistence: 0 days
## Network Behavior
- Service Status: Firewalled / No Services
- Open Ports: None detected
- DNS Resolution: No PTR hostnames; forward resolution count: 0
- Email Authentication: SPF and DMARC not configured
- Control Plane: BGP prefix 5.0.0.0/19; route stability: False
- Operator Score: 0.1304 (Minimal)
## Neighborhood Analysis
- Subnet: 5.0.2.71/24
- Abuse Density: 0% (Clean)
- Active Siblings: 0
- Threat Siblings: 0
- Inherited Risk: 0
## Historical Observations
14 total observations recorded. Recent signals indicate:
- 0 ownership changes
- No persistent malicious activity
- Geographic signals fluctuating between FR/SY regions
## Related Entities
Three relationship links identified, all associated with network identifier "SY-ISP-TARASSUL".
## Recommended Actions
Based on the low-risk profile and absence of active threats:
- No immediate firewall blocking recommended
- Standard monitoring protocols apply
- Geographic inconsistency warrants periodic revalidation
- Consider investigating DNSBL listing source if operational requirements demand
## Conclusion
IP 5.0.2.71 exhibits characteristics of a legitimate residential or organizational endpoint with minimal risk exposure. No immediate security action required. Continue standard monitoring procedures.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Firas Ahmad |
| ASN | AS29256 |
| Network Name | SY-ISP-TARASSUL |
| CIDR Block | 5.0.0.0/17 |
| RIR | RIPE |
| Country | SY |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS29256 |
| Network Prefix | 5.0.0.0/19 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:22:03 UTC |
| Last Seen | 2026-08-26 18:16:07 UTC |
| Profile Built | 2026-08-29 07:43:09 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 5.0.2.71
Who owns the IP address 5.0.2.71?
5.0.2.71 is registered to Firas Ahmad. The address falls within the 5.0.0.0/17 network block. Registration is held at RIPE.
Where is 5.0.2.71 located?
Geolocation data places 5.0.2.71 in Marseille, Damascus Governorate, France. The local time zone is Europe/Paris. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 5.0.2.71 malicious or safe?
5.0.2.71 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.