2.72.80.106
IP Intelligence Briefing: 2.72.80.106
Date: 2026-06-07
---
**1. Core Profile**
- Risk Score: 70 (High Risk)
- Ownership:
- ASN: 29355 (KCELL-GPRS-SUBSCRIBERS)
- Organization: Beibit Bitenov (Kazakhstan mobile carrier)
- Geolocation: Almaty, Kazakhstan (43.25°N, 76.91°E)
- Threat Indicators:
- Listed in 4/8 DNSBLs (DNS Blacklists)
- No direct malware, C2, or exploit indicators
- No known attacker/spam source associations
---
**2. Network Behavior**
- Services:
- No open ports or TLS/HTTP services detected
- DNSSEC validation enabled, but SPF/DKIM records only (no DMARC alignment)
- Routing:
- BGP prefix: 2.72.0.0/16 (ASN 29355)
- Route stability: Unstable (recent changes detected)
- Subnet:
- 2.72.80.106/24 (abuse density: 0%, no malicious neighbors)
---
**3. Threat Observations**
- DNSBL Listings:
- Flagged by 4/8 DNSBLs (e.g., Spamhaus, OpenBLAST, etc.)
- No correlation to known campaigns or honeypot activity
- Historical Activity:
- 17 observations over 30 days:
- 4 DNSBL listings (high-severity)
- Subnet abuse density: Clean
- No persistent threat or network anomalies
---
**4. Relationships**
- Network Links:
- Directly associated with kcell.kz (DNS: `2-72-80-106.kcell.kz`)
- Shared ASN 29355 (KCELL-GPRS-SUBSCRIBERS)
- No Known Malicious Associations:
- No C2, botnet, or infrastructure links detected
---
**5. Recommendations**
- Block/Rate-Limit: Implement firewall rules to block traffic from 2.72.80.106 due to DNSBL flags.
- Monitor Subnet: Track DNSBL activity in the 2.72.80.106/24 subnet for potential lateral movements.
- Verify DNS Security: Confirm SPF/DKIM alignment for `kcell.kz` to mitigate spoofing risks.
- Investigate BGP Stability: Monitor route changes for ASN 29355 to detect potential network compromises.
---
Conclusion: This IP is associated with a Kazakh mobile carrier but is flagged by multiple DNSBLs, suggesting potential abuse. While no direct malicious activity is observed, the DNSBL listings warrant further investigation into its use cases and network behavior.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Beibit Bitenov |
| ASN | AS29355 |
| Network Name | KCELL-GPRS-SUBSCRIBERS |
| CIDR Block | 2.72.0.0/14 |
| RIR | RIPE |
| Country | KZ |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 2-72-80-106.kcell.kz |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 2-72-80-106.kcell.kz |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 13% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 35% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 15% | 6 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-15 14:45:53 UTC |
| Last Seen | 2026-06-07 14:12:03 UTC |
| Profile Built | 2026-06-07 14:21:53 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 17 |
Full dossier details are available via our API.