5.255.102.165
# IP Intelligence Briefing: 5.255.102.165/32
Date: July 24, 2026
Classification: Low Risk with Notable DNSBL Presence
---
## Executive Summary
IP address 5.255.102.165 is assigned to Liteserver - The Infrastructure Group B.V. (ASN 60404) and operates within the 5.255.96.0/19 BGP prefix. The IP presents a low overall risk score (25) with a reputation classification of "Low Risk," but is currently listed on one of eight DNSBLs with high severity. The address shows no active services, no open ports, and no threat indicators.
---
## Risk Profile
- Overall Risk Score: 25 (Low Risk)
- Provider Score: 0
- Authority Score: 0
- Stability Score: 0
- Control Plane Status: Route changes observed within 30-day window; route stability flag is false
- DNSBL Status: Listed on 1 of 8 total blacklists (max severity: high)
- Threat Indicators: None detected
- Known Campaign Associations: None
---
## Geolocation & Network Attribution
- ASN: 60404 (Liteserver - The Infrastructure Group B.V., NL)
- BGP Prefix: 5.255.96.0/19
- Registered RIR: RIPE
- Registration Date: September 14, 2012
- Geolocation Discrepancy: Multiple data sources indicate conflicting locations—Netherlands (Dronten, Flevoland) and United Kingdom (London). Geo consensus is false.
- Network Classification: Infrastructure host; no CDN, cloud, VPN, proxy, or Tor attributes.
- Service Status: Firewalled/No Services detected; no open ports.
---
## Observation History
Ten signal observations were recorded over the monitoring period. Recent activity includes:
- DNSSEC: Valid
- PTR Record: Unresolved (null)
- Forward Resolution: Confirmed false
- Listings: Multiple blacklist detections (8 total lists; 1 listed with high severity)
- Geo Signals: Mixed results between Netherlands and United Kingdom sources
---
## Neighborhood Analysis
The /24 subnet 5.255.102.0/24 contains 4 sibling IP addresses:
- Abuse Density: 0
- Risk Distribution: 1 medium-risk, 3 low-risk neighbors
- Notable Neighbor: 5.255.102.26 carries a medium risk score of 49; remaining neighbors (5.255.102.9, 5.255.102.83, 5.255.102.136) score 25
No significant threat clustering observed within the subnet.
---
## Relationship Graph
No relationships were identified for this IP address. No linked hostnames, organizations, certificates, or related entities were found.
---
## Recommended Actions
No specific firewall rules or mitigation actions were generated by automated analysis. The IP's low risk score and lack of active services reduce immediate threat concerns. However, the DNSBL listing warrants periodic monitoring.
Monitoring Recommendations:
- Track DNSBL listing status and severity
- Monitor for service activation or port opening
- Observe geolocation consistency
- Watch for relationship graph development
---
Analyst Notes: This IP operates as part of a legitimate infrastructure provider network with no current malicious activity detected. The DNSBL listing is the primary concern and should be evaluated in context of the specific blacklist source and reason for listing.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | mnt-nl-theinfrastructuregroup-1 |
| ASN | AS60404 |
| Network Name | TIG |
| CIDR Block | 5.255.102.0/24 |
| RIR | RIPE |
| Country | NL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS60404 |
| Network Prefix | 5.255.96.0/19 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 8% | 2 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-07 18:43:52 UTC |
| Last Seen | 2026-08-29 04:57:08 UTC |
| Profile Built | 2026-08-29 04:57:26 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 5.255.102.165
Who owns the IP address 5.255.102.165?
5.255.102.165 is registered to mnt-nl-theinfrastructuregroup-1. The address falls within the 5.255.102.0/24 network block. Registration is held at RIPE.
Where is 5.255.102.165 located?
Geolocation data places 5.255.102.165 in Dronten, Flevoland, Netherlands. The local time zone is Europe/Amsterdam. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 5.255.102.165 malicious or safe?
5.255.102.165 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.