95.31.137.81📋 Copy

# THREAT INTELLIGENCE BRIEFING

IP Address: 95.31.137.81/32

Date: 2026-07-26

Classification: LOW RISK / RESIDENTIAL ENDPOINT

---

## EXECUTIVE SUMMARY

Intellectual property 95.31.137.81 was assessed as a LOW RISK residential endpoint associated with CORBINA TELECOM Network Operations in Moscow, Russia. The IP exhibits no active malicious indicators, no blacklist presence, and operates within a clean subnet environment. No immediate defensive action required.

---

## NETWORK IDENTIFICATION

• IP Address: 95.31.137.81/32
• Autonomous System: AS8402
• Organization: CORBINA TELECOM Network Operations
• Network Name: RU-CORBINA-20081010
• CIDR Block: 95.24.0.0/13
• RIR Registry: RIPE
• Geolocation: Moscow, Russia (RU)
• Infrastructure Type: Residential Endpoint

---

## RISK ASSESSMENT

---

## THREAT INDICATORS

• Malicious Activity: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None
• Threat Feeds: Clean
• Honeypot Hits: 0
• WAF Violations: 0
• Enumeration Strikes: 0
• Total Incidents: 0

---

## NEIGHBORHOOD ANALYSIS

Subnet: 95.31.137.81/24

• Abuse Density: 0 (Clean)
• Classification: Clean
• Inherited Risk: 0
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

No neighboring IPs flagged for abuse activity within the immediate /24 subnet.

---

## OBSERVATION HISTORY

Fourteen signal observations recorded. Key temporal indicators:

• Ownership Changes: 0 (Stable)
• Threat Persistence Days: 0 (No persistent activity)
• Threat Observation Count: 0
• Persistently Malicious: False
• Recent Classification: Residential Endpoint
• Subnet Classification: Clean (as of 2026-07-26)

---

## RELATIONSHIP GRAPH

The IP exhibits only internal network relationships to the RU-CORBINA-20081010 network block. No external associations detected with:

• Hostnames
• Organizations (beyond network operator)
• SSL Certificates
• Related IP entities

---

## SERVICES & DNS

• Open Ports: None detected
• TLS Certificates: None
• HTTP Title: None
• PTR Hostnames: None
• Forward Resolution: 0
• Email Auth: No SPF/DMARC records
• Hosted Domains: 0

---

## CONTROL PLANE

• BGP Prefix: 95.30.0.0/15
• Route Stability: False
• RPKI State: Not configured
• IRR Consistency: N/A
• Route Changes (30d): 0
• DNSSEC: Valid
• MOAS Status: False

---

## RECOMMENDED ACTIONS

Status: No action required

Based on current risk profile (Score: 25), no specific firewall rules or blocking recommendations are generated. This IP is classified as a legitimate residential endpoint with no active threat indicators.

Suggested Monitoring:

• Continue standard traffic monitoring
• No immediate blocking or rate-limiting required
• Consider whitelisting if previously flagged erroneously

---

## ANALYST NOTES

This IP represents a standard residential connection from a major Russian telecommunications provider. The absence of malicious indicators, combined with clean neighborhood data and stable ownership history, supports classification as a benign endpoint. No correlation with known threat campaigns or attacker infrastructure was identified during this assessment.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.