Analysis of IP 5.255.231.3/32 identified the address as belonging to YANDEX LLC (ASN 208722) within the Russian Federation. The profile assigned a Low Risk reputation with a risk score of 25. Reverse DNS resolution confirmed the host as 5-255-231-3.spider.yandex.com, while no open services were detected. The control plane indicated the IP was listed on one of eight DNSBLs, yet the neighborhood classification remained clean with a low abuse density of 0.0385. Behavioral analysis recorded zero incidents, honeypot hits, or enumeration strikes. Although the threat actor classification flagged the host as Suspicious, the overall confidence label was Very Low and the recommendation was to Monitor the address given the clean neighborhood context. The IP was first observed on 2026-07-08 and most recently on 2026-08-26.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | YANDEX LLC |
| ASN | AS208722 |
| Network Name | YANDEX-5-255-231-0 |
| CIDR Block | 5.255.231.0/24 |
| RIR | RIPE |
| Country | RU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 5-255-231-3.spider.yandex.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 5-255-231-3.spider.yandex.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | Unknown |
| Network Prefix | 5.255.192.0/18 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 17% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 28% | 2 | 3 |
| Overall | 20% | 9 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 19:11:58 UTC |
| Last Seen | 2026-09-19 10:01:25 UTC |
| Profile Built | 2026-09-19 10:16:06 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 29 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 5.255.231.3
Who owns the IP address 5.255.231.3?
5.255.231.3 is registered to YANDEX LLC. The address falls within the 5.255.231.0/24 network block. Registration is held at RIPE.
Where is 5.255.231.3 located?
Geolocation data places 5.255.231.3 in RUSSIAN FEDERATION, Leo, Russia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 5.255.231.3 malicious or safe?
5.255.231.3 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 5.255.231.3?
The reverse DNS (PTR) record for 5.255.231.3 is 5-255-231-3.spider.yandex.com. This hostname is forward-confirmed, meaning it resolves back to the same address.