116.90.98.100📋 Copy

Threat Intelligence Briefing for IP 116.90.98.100/32

Date: 2026-06-11

---

**1. Core Profile**

• Risk Score: 70/100 (High Risk)
• Ownership:

- ASN: 141342 (Syed Mohd Raza Pasha, Pakistan)

- Subnet: 116.90.98.0/24 (GERRYSNET)

- Geolocation: Karachi, Sindh, Pakistan (24.86°N, 67°E)

• Threat Indicators:

- Listed in 4 DNSBLs (abuse confidence score: 0).

- No active services, open ports, or TLS certificates detected.

- Firewalled network with no HTTP/HTTPS activity.

---

**2. Observation History**

• Recent Activity (Last 30 Days):

- DNSBL Listings: 4 entries (8 total lists).

- DNSSEC Valid: Yes.

- BGP Stability: Unstable (route changes detected).

- No Malicious Campaigns or Spam Sources Identified.

---

**3. Network Relationships**

• Subnet: 116.90.98.0/24 (abuse density: 0%).
• Neighbors:

- 116.90.98.98 (risk score: 70), 116.90.98.116 (risk score: 55).

• Shared Network: GERRYSNET (Syed Mohd Raza Pasha).

---

**4. Security Recommendations**

• Firewall Actions:

- Block IP: `iptables -A INPUT -s 116.90.98.100 -j DROP`

- Cloudflare/WAF Rules:

```json

{

"description": "Block 116.90.98.100 – IPDebrief risk score 70",

"action": "block",

"filter": {"expression": "ip.src eq 116.90.98.100"}

}

```

• Monitoring:

- Increase logging verbosity for this IP.

- Investigate DNSBL listings and verify ownership legitimacy.

- Monitor neighboring IPs (116.90.98.98, 116.90.98.116) for anomalies.

---

**5. Conclusion**

The IP exhibits high risk due to DNSBL listings and unstable BGP routing, though no direct malicious activity (e.g., C2, phishing, or exploits) was observed. The subnet has low abuse density, but the owner’s network (GERRYSNET) warrants closer scrutiny. Block the IP immediately and validate its legitimacy with the owner (Syed Mohd Raza Pasha).

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.