95.165.144.96📋 Copy

## INTELLIGENCE BRIEFING: 95.165.144.96/32

Classification: Moderate Risk (Score: 65/100)

Source: IPDebrief Intelligence Platform | Generated: 2026-07-28

---

**EXECUTIVE SUMMARY**

IP 95.165.144.96 is a Russian residential mobile IP address assigned to MTS (MTS PJSC) under the MGTS-PPPOE network. The address shows no active threat indicators, no known malicious campaigns, and zero threat observations in the monitoring history. The IP is classified as mobile/residential with no open services detected and is currently firewalled. While the IP itself shows no active abuse, it is listed on 3 DNSBLs with a minimal operator score of 0.1304.

---

**NETWORK ATTRIBUTES**

• ASN: 25513 (MGTS-USPD-MNT)
• Organization: MGTS-PPPOE
• Geolocation: Moscow, Russia (RU)
• CIDR Block: 95.165.128.0/17
• Connection Type: Mobile (MTS LTE, MCC 250, MNC 01)
• RIR: Ripe
• BGP Prefix: 95.165.0.0/16

---

**THREAT INDICATORS**

• Risk Score: 65/100 (Moderate Risk)
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listings: 3 of 8 total lists
• Operator Score: 0.1304 (Minimal)
• Threat Observation Count: 0
• Persistently Malicious: No

---

**INFRASTRUCTURE ANALYSIS**

• Open Ports: None detected
• DNS Records: No PTR hostnames, no forward resolution
• HTTP Services: None (firewalled/no services)
• TLS Certificates: None
• Email Auth: SPF/DMARC not configured
• Control Plane: Route stability flagging (isRouteStable: false); 30-day route changes: 0

---

**NEIGHBORHOOD ASSESSMENT**

• Subnet: 95.165.144.96/24
• Abuse Density: 0
• Classification: Clean
• Total Sibling IPs: 1
• Threat Siblings: 0
• Risk Distribution: No high/medium/low risk neighbors detected

---

**HISTORICAL OBSERVATIONS**

15 observations recorded (2026-07-28). No ownership changes, no threat persistence detected. Recent signals indicate consistent mobile carrier assignment (MTS) with geolocation validation showing Moscow coordinates (61.52, 105.32) with 5000km accuracy radius. No ICMP responses received (violation: ICMP blocked).

---

**RELATIONSHIP GRAPH**

All 4 detected relationships map to "MGTS-PPPOE" (same network). No external entity relationships detected with subnets, hostnames, organizations, or certificates.

---

**RECOMMENDED ACTIONS**

Primary Recommendation: Increase logging verbosity and review recent activity from this IP (Severity: High)

Firewall Rules:

• iptables: `iptables -A INPUT -s 95.165.144.96 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 95.165.144.96 drop`
• nginx: `deny 95.165.144.96;`
• pfSense: `95.165.144.96/32`
• Cloudflare WAF: Block expression `ip.src eq 95.165.144.96`
• AWS WAF: `Addresses: ["95.165.144.96/32"]`

---

**SOC ANALYST NOTES**

This IP presents low immediate threat but warrants monitoring due to:

1. Elevated risk score (65/100) with no clear threat attribution

2. DNSBL listings (3 of 8) suggesting historical reputation issues

3. Route stability flagging despite zero 30-day route changes

4. Residential/mobile nature may indicate potential for credential stuffing or spam campaigns

No active malicious indicators detected. Recommended action is logging and observation rather than immediate block, unless additional threat intelligence signals emerge.

---

*This briefing is based on data returned by IPDebrief intelligence platform. Recommendations are probabilistic and should be validated against organizational context before implementation.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.