5.79.223.171
# IP Intelligence Briefing: 5.79.223.171/32
## Executive Summary
IP 5.79.223.171 is a low-risk Russian infrastructure address operated by INTERSVYAS-MNT (ASN 8369). The address shows minimal threat indicators with no known malicious activity, no blacklist entries, and a clean neighborhood classification. No immediate defensive action is required.
---
## Ownership and Network Classification
- Organization: INTERSVYAS-MNT
- Network Name: INTERSV-NET-39
- ASN: 8369
- RIR: RIPE
- CIDR Block: 5.79.192.0/18
- BGP Prefix: 5.79.128.0/17
- Country: Russia (RU)
- Region: Chechnya (CHE)
- City: Korkino
---
## Threat Intelligence Assessment
| Metric | Value | Status |
|---|---|---|
| Risk Score | 15 | Low Risk |
| Abuse Confidence Score | Not Reported | N/A |
| Blacklist Count | 0 | Clean |
| DNSBL Listed | 1/8 lists | Minor |
| Is Tor Exit | No | N/A |
| Is Known Attacker | No | N/A |
| Is Spam Source | No | N/A |
| Threat Persistence Days | 0 | No Persistent Threats |
| Threat Observation Count | 0 | No Malicious Signals |
---
## Technical Profile
- DNS Reverse: pool-5-79-223-171.is74.ru
- Forward Resolution: Confirmed (1 hostname)
- Email Authentication: SPF and DMARC records present
- DNSSEC: Valid
- Open Ports: None detected
- Services: Firewalled / No active services
- Certificate Authority: Not applicable
---
## Neighborhood Analysis
- Subnet: 5.79.223.171/24
- Abuse Density: 0 (Clean)
- Threat Siblings: 0
- Classification: Clean
- Active Siblings: 1 (same IP address)
---
## Historical Observation
Total Observations: 21 signals
Latest Activity: 2026-07-27 07:26:58 UTC
Key Historical Indicators:
- Traceroute hops: 30 (target not reached in recent probe)
- Geographic validation: Plausible (distance: 3,518.5 km from probe origin)
- ICMP: Blocked (unable to validate)
- Network role: Consistently classified as non-hosting infrastructure
- Ownership stability: No changes observed
---
## Relationship Graph
Total Relationships: 9
- Network Associations: Multiple entries to INTERSV-NET-39
- DNS Associations: Multiple entries to pool-5-79-223-171.is74.ru
---
## Recommended Actions
No immediate defensive actions recommended. The IP address demonstrates:
- Minimal risk profile (score 15)
- No malicious campaign correlation
- Clean neighborhood classification
- No blacklist presence
- No threat persistence indicators
Monitoring: Continue standard monitoring. No special firewall rules required at this time.
---
## Conclusion
IP 5.79.223.171 represents a legitimate, low-risk Russian network infrastructure asset with no active threat indicators. The address shows standard network behavior for a residential or small business connection in the Korkino region. No defensive measures beyond routine monitoring are warranted.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | INTERSVYAS-MNT |
| ASN | AS8369 |
| Network Name | INTERSV-NET-39 |
| CIDR Block | 5.79.192.0/18 |
| RIR | RIPE |
| Country | RU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | pool-5-79-223-171.is74.ru |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | pool-5-79-223-171.is74.ru |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8369 |
| Network Prefix | 5.79.128.0/17 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 18% | 5 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-13 09:17:48 UTC |
| Last Seen | 2026-07-27 07:18:21 UTC |
| Profile Built | 2026-08-31 01:51:30 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 5.79.223.171
Who owns the IP address 5.79.223.171?
5.79.223.171 is registered to INTERSVYAS-MNT. The address falls within the 5.79.192.0/18 network block. Registration is held at RIPE.
Where is 5.79.223.171 located?
Geolocation data places 5.79.223.171 in Korkino, CHE, Russia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 5.79.223.171 malicious or safe?
5.79.223.171 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 5.79.223.171?
The reverse DNS (PTR) record for 5.79.223.171 is pool-5-79-223-171.is74.ru. This hostname is not forward-confirmed, so it should be treated as a weak signal.