95.65.98.52
# IP INTELLIGENCE BRIEFING
Target: 95.65.98.52/32
Classification: Low Risk / No Active Threat Indicators
Date: 2026-07-22
---
## EXECUTIVE SUMMARY
IP 95.65.98.52 presents as a low-risk address with no active threat indicators. The address is currently firewalled with no detected services, no open ports, and no association with known malicious campaigns. Risk scoring indicates minimal concern (riskScore: 0).
---
## NETWORK PROFILE
| Attribute | Value |
|---|---|
| Risk Score | 0 (Low Risk) |
| Provider Score | 0 |
| Authority Score | 0 |
| Stability Score | 0 |
| ASN | Not Resolved |
| Organization | Not Resolved |
| CIDR Block | 95.65.0.0/17 |
| RIR | RIPE |
---
## GEOLOCATION ANALYSIS
Primary Location: Moldova (MD) / Chisinau
Secondary Location: United Kingdom (GB) / London (Conflicting)
Geographic Consensus: FALSE (Multiple geo sources with discrepancies)
Geolocation Accuracy: Limited (0 sources with high confidence)
---
## OWNERSHIP & REGISTRATION
- Registration Authority: MNT-STARNETMD
- Abuse Contact: abuse@starnet.md
- Network Name: MD-SNS-20081028
- Registration Date: 2008-10-28
- RIR: RIPE
---
## THREAT INTELLIGENCE
- Known Attacker: FALSE
- Spam Source: FALSE
- Tor Exit Node: FALSE
- Blacklist Count: 0
- Threat Feeds: Empty
- Known Campaigns: None
- Abuse Confidence Score: Not Available
---
## SERVICE & PORT ANALYSIS
- Open Ports: None detected
- HTTP/TLS Services: None
- Server Banner: Not Detected
- Status: Firewalled / No Services
---
## DNS ANALYSIS
- PTR Hostnames: None
- Forward Resolution: Inactive (0 records)
- Domain Associations: None
- Email Authentication (SPF/DMARC): Not Configured
---
## NEIGHBORHOOD ANALYSIS
Subnet: 95.65.98.0/24
- Total Siblings: 0
- Active Siblings: 0
- Threat Siblings: 0
- Abuse Density: 0
- Inherited Risk: 0
---
## RELATIONSHIP GRAPH
- Related Entities: 0
- Linked Hostnames: None
- Linked Organizations: None
- Linked Certificates: None
---
## OBSERVATION HISTORY (7 Observations)
Latest Signal (2026-07-22 19:21:37 UTC):
- Geolocation: Chisinau, Moldova (MD)
- Provider: MNT-STARNETMD
- RIR: RIPE
Temporal Indicators:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: FALSE
---
## RECOMMENDED ACTIONS
No immediate firewall or security actions recommended.
The IP address presents minimal risk with no detected malicious activity. Routine monitoring is appropriate given the geolocation inconsistency and lack of service exposure.
---
## ANALYST NOTES
1. Geolocation Discrepancy: The IP shows conflicting geolocation data (Moldova vs UK). Investigation recommended if this impacts security posture.
2. Firewalled Status: No services detected, which reduces attack surface but may indicate non-operational or internal asset.
3. Historical Stability: Registration dates from 2008 suggest long-standing infrastructure, though ownership details are incomplete.
4. Risk Profile: Current risk score of 0 indicates no active threats detected across all monitored feeds.
---
Generated by: IPDebrief Intelligence Platform
Confidence Level: Moderate (incomplete ownership/geolocation data)
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | MNT-STARNETMD |
| ASN | AS31252 |
| Network Name | MD-SNS-20081028 |
| CIDR Block | 95.65.0.0/17 |
| RIR | RIPE |
| Country | MD |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 95-65-98-52.starnet.md |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 95-65-98-52.starnet.md |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS31252 |
| Network Prefix | 95.65.0.0/17 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 4% | 1 | 1 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:22:26 UTC |
| Last Seen | 2026-09-29 03:09:23 UTC |
| Profile Built | 2026-09-24 14:10:19 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 95.65.98.52
Who owns the IP address 95.65.98.52?
95.65.98.52 is registered to MNT-STARNETMD. The address falls within the 95.65.0.0/17 network block. Registration is held at RIPE.
Where is 95.65.98.52 located?
Geolocation data places 95.65.98.52 in London, Chișinău Municipality, United Kingdom. The local time zone is Europe/London. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 95.65.98.52 malicious or safe?
95.65.98.52 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 95.65.98.52?
The reverse DNS (PTR) record for 95.65.98.52 is 95-65-98-52.starnet.md. This hostname is not forward-confirmed, so it should be treated as a weak signal.