95.57.130.9📋 Copy

IP Intelligence Briefing: 95.57.130.9

Date: 2026-05-31

---

**1. Core Profile**

• Risk Rating: Moderate (Risk Score: 40)
• Ownership:

- ASN: 9198 (KNIC-MNT, Kazakh ISP)

- Geolocation: Almaty, Kazakhstan (43.25°N, 76.91°E)

• Threat Indicators:

- No active malware, phishing, or C2 activity detected.

- Listed in 2/8 DNSBLs (low-severity abuse confidence).

• Network Role: Firewalled / No Services (no open ports or TLS certificates).

---

**2. Observation History**

• Geolocation Consistency: Stable (Almaty, Kazakhstan) across 18 observations.
• Threat Trends:

- No persistent malicious activity (0 threat persistence days).

- Minimal DNSBL listings (2 out of 8).

• Network Stability:

- BGP prefix: 95.57.128.0/20 (KAZTELECOM-AS).

- Route stability: 0 changes in 30 days.

---

**3. Relationships & Network Context**

• Linked Entities:

- Subnet: 95.57.128.0/20 (KOSTMETRO network).

- DNS: Resolves to `95.57.130.9.dynamic.telecom.kz` (SPF/DMARC records present).

• Neighbor Analysis:

- Subnet abuse density: 0% (no malicious neighbors detected).

---

**4. Actionable Insights**

• SOC Recommendations:

- Monitor DNSBL listings for potential abuse (e.g., spam or phishing).

- Ensure firewall rules block traffic from KNIC-MNT ASN (9198) if not already permitted.

- Validate geolocation consistency for potential spoofing risks.

• Next Steps:

- Cross-reference with internal threat feeds for additional context.

- Consider enabling DNS-layer protections for `telecom.kz` domain.

---

Conclusion:

The IP is owned by a Kazakh ISP with no direct malicious activity. While it appears in low-severity DNSBLs, the network and subnet show no signs of active exploitation. SOC teams should maintain vigilance against potential abuse from this ISP’s network but prioritize higher-risk targets.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.