111.92.147.74📋 Copy

# IP Intelligence Briefing: 111.92.147.74/32

Classification: Low Risk / Minimal Threat

Date: July 27, 2026

Analyst: IPDebrief Intelligence Division

---

## Executive Summary

IP address 111.92.147.74 is assigned to SkyNet-Multi-Services-Pvt-Ltd (ASN 134489) in Rahim Yar Khan, Punjab, Pakistan. The asset presents a low-risk profile with a risk score of 25. No active malicious indicators, open services, or threat persistence detected. The IP is classified as "Firewalled / No Services" with no detectable open ports or DNS records.

---

## Technical Profile

Ownership & Network:

• Organization: Talha Naeem / SkyNet-Multi-Services-Pvt-Ltd
• ASN: 134489
• CIDR Block: 111.92.128.0/20
• Registration: APNIC (Regional Internet Registry)
• Network Role: Infrastructure (Firewalled)

Geolocation:

• Country: Pakistan (PK)
• Region: Punjab
• City: Rahim Yar Khan
• Coordinates: 28.68°N, 70.34°E
• Geolocation Consensus: Valid (1 source, consensus confirmed)

Threat Indicators:

• Risk Score: 25 (Low)
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

---

## Network Behavior & Services

Services Analysis:

• Open Ports: None detected
• DNS Records: No PTR or forward resolution
• HTTP/HTTPS: No active web services
• TLS Certificates: None
• Email Auth: No SPF/DMARC records

Routing & Control Plane:

• BGP Prefix: 111.92.147.0/24
• Route Stability: False (minor instability detected)
• RPKI State: Not validated
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)

---

## Neighborhood Analysis

Subnet Context: 111.92.147.0/24

• Total Neighbors: 2
• Abuse Density: 0
• Risk Distribution: 2 Low Risk, 0 Medium, 0 High

Adjacent IPs:

Assessment: The /24 subnet demonstrates minimal abuse density with no high-risk neighbors. Both adjacent IPs show low-risk profiles consistent with the target IP.

---

## Observation History

Temporal Signals: 13 observations recorded (most recent: 2026-07-27)

Key Findings:

• No threat persistence detected
• No ownership changes observed
• ICMP validation blocked (unable to validate geolocation via ICMP)
• Minimal operator score with limited signal coverage
• No malicious campaign correlations

---

## Relationships

Identified Links: 4 relationships

• All relationships map to SkyNet-Multi-Services-Pvt-Ltd network
• No external hostname, certificate, or organization links beyond the owning network

---

## Recommended Actions

Firewall/Security Policy:

1. Allow by Default: No blocking recommended based on current risk profile

2. Monitor Traffic: Standard logging recommended for inbound/outbound activity

3. Geolocation Context: Traffic from Pakistan may warrant additional context based on organizational policy

4. No Immediate Mitigation: Asset does not require active blocking or rate limiting

SOC Analyst Guidance:

• This IP does not exhibit characteristics of active threat actors
• No evidence of command-and-control, scanning, or malware distribution
• No blacklisting or reputation-based indicators present
• The asset appears to be a legitimate infrastructure endpoint with no services exposed

Priority: LOW

Action Required: None (passive monitoring sufficient)

---

Sources: IPDebrief Intelligence Platform

Data Freshness: Current (July 2026)

Confidence Level: High

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.