## IP Intelligence Briefing: 2.135.183.111/32
Classification: Moderate Risk | Last Updated: 2026-07-28
Executive Summary
IP 2.135.183.111 presents as a moderately risky static residential endpoint with no active exploit activity. The address resolves to a dynamic host domain under AKTOMETRO network infrastructure. No threat indicators, open services, or malicious behavioral patterns detected during observation window.
Network Attribution
- ASN: 9198
- Organization: KNIC-MNT
- CIDR Block: 2.135.176.0/21
- Geolocation: Inconsistent reports indicate DE (Frankfurt) and KZ (Almaty); geovalidation flagged as implausible
- Network Role: Firewalled / No Services
Threat Assessment
- Risk Score: 40/100 (Moderate)
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- VPN/Proxy: No
- Blacklist Count: 0
- DNSBL Listed: 2 of 8 total lists
- Threat Persistence: None detected (0 days)
Observational History
18 signal observations recorded. Key findings:
- Ownership Stability: 0 ownership changes; network assignment stable
- Recent Signals: Geolocation reports fluctuated between KZ and DE; ASN null reported in recent probe
- Malicious Activity: No campaign matches, no correlated IPs, no banner matches
- Threat Persistence: Not classified as persistently malicious
Network Relationships
- DNS Association: 2.135.183.111.dynamic.telecom.kz (forward confirmed)
- Email Authentication: SPF and DMARC records present
- Same Network: AKTOMETRO subnet
- Related Entities: Multiple duplicate DNS associations to same hostname
Neighborhood Analysis (2.135.183.0/24)
- Neighbor Count: 0
- Abuse Density: 0%
- Threat Siblings: None detected
- High/Medium/Low Risk: 0/0/0
- Classification: No inherited risk from subnet peers
Technical Indicators
- Open Ports: None detected
- TLS Certificate: None
- HTTP Banner: None
- RTT: First hop 0.1ms, last hop 169.4ms; 2 timed-out hops
- Traceroute: 12 hops; Comcast transit network detected
- DNSSEC: Valid
- RPKI: No state reported
Security Recommendations
No immediate blocking or mitigation required. Monitor for:
- Emergence of open services on this host
- DNSBL listing expansion
- Geolocation inconsistencies indicating infrastructure changes
- Emergence of correlated threat activity
Priority: Low | Recommended Action: Standard monitoring
---
*Intelligence generated via IPDebrief tools. Data represents observational snapshot as of 2026-07-28.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | KNIC-MNT |
| ASN | AS9198 |
| Network Name | AKTOMETRO |
| CIDR Block | 2.135.176.0/21 |
| RIR | RIPE |
| Country | KZ |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 2.135.183.111.dynamic.telecom.kz |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 2.135.183.111.dynamic.telecom.kz |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS9198 |
| Network Prefix | 2.135.176.0/21 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 25% | 2 | 4 |
| reputation | 22% | 1 | 3 |
| geolocation | 12% | 2 | 2 |
| Overall | 17% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-16 16:44:00 UTC |
| Last Seen | 2026-09-04 19:14:18 UTC |
| Profile Built | 2026-09-04 19:19:21 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 2.135.183.111
Who owns the IP address 2.135.183.111?
2.135.183.111 is registered to KNIC-MNT. The address falls within the 2.135.176.0/21 network block. Registration is held at RIPE.
Where is 2.135.183.111 located?
Geolocation data places 2.135.183.111 in Frankfurt, Aktobe, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 2.135.183.111 malicious or safe?
2.135.183.111 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 2.135.183.111?
The reverse DNS (PTR) record for 2.135.183.111 is 2.135.183.111.dynamic.telecom.kz. This hostname is forward-confirmed, meaning it resolves back to the same address.