79.138.85.168
IP INTELLIGENCE BRIEFING
Target: 79.138.85.168/32
Classification: Low Risk Residential Broadband
Date: 2026-07-27
---
EXECUTIVE SUMMARY
IP address 79.138.85.168 is classified as low risk (Risk Score: 15) and operates within the BREDBAND2-NET-SE network infrastructure (ASN: 29518). The address represents a residential broadband connection with no active services, no open ports, and no known malicious activity. The subnet demonstrates clean classification with zero abuse density.
---
OWNERSHIP & NETWORK CLASSIFICATION
- ASN: 29518 (BREDBAND2-NET-SE)
- Organization: BB2-MNT
- CIDR Block: 79.138.80.0/21
- RIR: RIPE
- Network Type: Residential Broadband
- Classification: Firewalled / No Services
Geolocation:
- Primary: United States, New Jersey (Newark)
- Inferred Signals: Sweden (600km accuracy radius)
- Geographic Consensus: Inconsistent (2 sources, geoConsensus: false)
- Note: Geolocation discrepancies indicate residential ISP routing characteristics
---
THREAT INDICATORS
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- DNSBL Listings: 1 of 8 total lists (DNSBL Listed Count)
- Maximum Severity: Medium
- Known Campaigns: None detected
- Threat Persistence: 0 days observed
---
NETWORK BEHAVIOR
- Open Ports: None detected
- HTTP/HTTPS Services: None
- TLS Certificates: None
- PTR Hostname: h79-138-85-168.cust.bredband2.com
- DNS Resolution: Forward confirmed
- Traceroute: 16 hops (Comcast transit), RTT 108.5ms
- Route Stability: Unstable (isRouteStable: false)
---
RELATIONSHIP ANALYSIS
- Same Network: BREDBAND2-NET-SE (multiple entries)
- DNS Associations: h79-138-85-168.cust.bredband2.com
- Relationship Count: 4 total entities
- Correlated IPs: 0
---
NEIGHBORHOOD ASSESSMENT
- Subnet: 79.138.85.168/24
- Abuse Density: 0% (Clean)
- Total Siblings: 1
- Active Threat Siblings: 0
- Inherited Risk: 0
---
OBSERVATION HISTORY (18 Signals)
Recent signals (2026-07-27) include:
- Geolocation: Multi-signal inference (Sweden, 52% confidence)
- Port Scanning: Standard scan activity
- Traceroute: 16-hop path confirmed
- DNSBL: Listed on 1 of 8 feeds (medium severity)
- DNS Resolution: bredband2.com domain confirmed
---
RECOMMENDED ACTIONS
SOC Assessment: No immediate blocking required. IP represents standard residential broadband with low-risk characteristics.
Firewall Considerations:
- No services detected (no ports open)
- PTR hostname indicates residential connection
- DNSBL listing requires context evaluation
Monitoring: Continue standard observation. No behavioral anomalies detected.
---
RISK ASSESSMENT: LOW
This IP address presents minimal threat to network security. The residential broadband classification, combined with clean subnet metrics and absence of malicious indicators, supports standard allow-listing with monitoring. No firewall rules required unless specific organizational policies mandate otherwise.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | BB2-MNT |
| ASN | AS29518 |
| Network Name | BREDBAND2-NET-SE |
| CIDR Block | 79.138.80.0/21 |
| RIR | RIPE |
| Country | SE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | h79-138-85-168.cust.bredband2.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | h79-138-85-168.cust.bredband2.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS29518 |
| Network Prefix | 79.138.0.0/17 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 13% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 8% | 3 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-15 04:06:35 UTC |
| Last Seen | 2026-07-27 20:35:58 UTC |
| Profile Built | 2026-08-31 01:42:59 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 79.138.85.168
Who owns the IP address 79.138.85.168?
79.138.85.168 is registered to BB2-MNT. The address falls within the 79.138.80.0/21 network block. Registration is held at RIPE.
Where is 79.138.85.168 located?
Geolocation data places 79.138.85.168 in Uppsala, Uppsala County, Sweden. The local time zone is Europe/Stockholm. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 79.138.85.168 malicious or safe?
79.138.85.168 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 79.138.85.168?
The reverse DNS (PTR) record for 79.138.85.168 is h79-138-85-168.cust.bredband2.com. This hostname is forward-confirmed, meaning it resolves back to the same address.