117.134.199.7
# IP Intelligence Briefing: 117.134.199.7
Classification: LOW RISK / BENIGN
Date: 2026-07-29
Analyst: IPDebrief Intelligence Team
---
## Executive Summary
IP address 117.134.199.7 is classified as low risk with a risk score of 0. No active threat indicators detected. The IP belongs to CMPak Limited (ASN 138423) within the 117.134.192.0/18 block. No services are currently running on the host, and the subnet shows zero abuse density with three sibling IPs in an active state.
---
## Ownership and Registration
| Field | Value |
|---|---|
| **Organization** | CMPak Limited |
| **Network Name** | CMPAKLIMITED-PK |
| **ASN** | 138423 |
| **CIDR Block** | 117.134.192.0/18 |
| **RIR** | APNIC |
| **Abuse Contact** | Available via RDAP |
---
## Network Analysis
Current State: Firewalled / No Services
Open Ports: None detected
DNS Status: No PTR records, forward resolution confirmed: false
Hosted Domains: 0
Email Auth: SPF/DMARC not configured (no hosted domain)
---
## Geolocation Data
*Note: Data quality indicators suggest inconsistencies.*
| Field | Value |
|---|---|
| **Country** | FR (France) |
| **Region** | Pakistan |
| **City** | Marseille |
| **Timezone** | Europe/Paris |
| **Geo Source Count** | 1 |
| **Geo Consensus** | true |
| **Geo Plausible** | false |
Assessment: Geolocation data shows contradictory country/region/city values. This discrepancy may indicate data quality issues or misconfigured geolocation services.
---
## Threat Intelligence Indicators
| Indicator | Status |
|---|---|
| **Threat Score** | 0 |
| **Abuse Confidence Score** | Not available |
| **Blacklist Count** | 0 |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Campaigns** | None detected |
| **Threat Feeds** | None |
---
## Subnet Neighborhood (117.134.199.0/24)
| Metric | Value |
|---|---|
| **Subnet Classification** | Clean |
| **Abuse Density** | 0 |
| **Total Siblings** | 4 |
| **Active Siblings** | 3 |
| **Threat Siblings** | 0 |
| **Inherited Risk** | 0 |
Neighbor Risk Distribution:
- High Risk: 0
- Medium Risk: 0
- Low Risk: 3
*Neighbor IPs*: 117.134.199.3 (risk: 25), 117.134.199.4 (risk: 0), 117.134.199.5 (risk: 25)
---
## Historical Observation Summary
Total Observations: 14
Threat Persistence: 0 days
Observation Count: 0
Persistently Malicious: No
Recent observations (2026-07-29):
- Ownership stability signals present
- No banner or certificate matches
- Subnet classification remains clean
- No service enumeration strikes detected
- Operator score: Minimal (0.1304)
---
## Control Plane & BGP
| Field | Value |
|---|---|
| **Origin ASN** | 138423 |
| **BGP Prefix** | 117.134.199.0/24 |
| **Route Stability** | false |
| **isRouteStable** | false |
| **isMoas** | false |
| **Route Changes (30d)** | 0 |
| **RPKI State** | Not available |
---
## Recommended Actions
Security Recommendations: None required
Firewall Rules: Not applicable
Risk Score: 0
Assessment: No actionable security measures needed. The IP shows no malicious behavior and belongs to a clean subnet environment.
---
## SOC Analyst Notes
1. Low Threat Profile: IP demonstrates no malicious indicators across all threat feeds and blacklists.
2. Service Status: Host is firewalled with no open ports detected—minimal attack surface.
3. Subnet Context: Neighbor IPs show minimal risk (0-25 scores) with zero threat siblings in the /24.
4. Data Quality Flag: Geolocation inconsistencies (FR/Pakistan/Marseille) warrant monitoring but do not indicate active threats.
5. BGP Routing: Route stability flag is false despite zero route changes—may indicate transient routing anomalies.
Recommendation: Monitor for service activation. No immediate blocking or investigation required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | CMPak Limited |
| ASN | AS138423 |
| Network Name | CMPAKLIMITED-PK |
| CIDR Block | 117.134.192.0/18 |
| RIR | APNIC |
| Country | PK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-21 19:02:36 UTC |
| Last Seen | 2026-07-29 10:02:19 UTC |
| Profile Built | 2026-07-29 10:12:43 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 16 |
Full dossier details are available via our API.