119.152.228.240
# IPDebrief Intelligence Briefing: 119.152.228.240/32
Classification: Moderate Risk | Generated: Current | Status: Active Monitoring
---
## Executive Summary
IP address 119.152.228.240 is assigned to PTCL (Munir Ahmed, ASN 136525) within the APNIC RIR region. The IP demonstrates moderate risk (score: 40) with no current active threat indicators. The address is firewalled with no services exposed and no open ports detected. Two blacklist entries were identified, with no correlation to known campaigns.
---
## Technical Profile
| Attribute | Value |
|---|---|
| **IP Address** | 119.152.228.240/32 |
| **Risk Score** | 40 (Moderate) |
| **ASN** | 136525 |
| **Organization** | PTCL / Munir Ahmed |
| **Country** | Pakistan (PK) |
| **CIDR Block** | 119.152.192.0/18 |
| **BGP Prefix** | 119.152.228.0/24 |
| **Service Purpose** | Firewalled / No Services |
| **DNSBL Listed** | 2 of 8 lists |
| **Operator Score** | 0.1304 (Minimal) |
---
## Threat Assessment
Current Indicators: None. No known attacker, Tor exit, or spam source classification. No active campaigns correlated.
Historical Context: Sixteen observations recorded with no evidence of persistent malicious activity. Threat observation count: 0. Is persistently malicious: false.
DNS Infrastructure: No hosted domains, no email authentication (SPF/DMARC), no forward resolution capability.
---
## Neighborhood Analysis (119.152.228.0/24)
| Metric | Value |
|---|---|
| **Subnet Classification** | Clean |
| **Abuse Density** | 0.00 |
| **Total Siblings** | 3 |
| **Active Siblings** | 2 |
| **Threat Siblings** | 0 |
Adjacent IPs:
- 119.152.228.48: Risk Score 40, Authority Score 50
- 119.152.228.252: No risk/authority scores recorded
The subnet shows no inherited risk and clean classification.
---
## Observed Relationships
All five relationship entries indicate "Same Network" classification to PTCL infrastructure. No cross-organization or cross-network relationships detected.
---
## Recommended Security Actions
Based on risk profile, the following controls are recommended:
Firewall Rules:
- iptables: `iptables -A INPUT -s 119.152.228.240 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 119.152.228.240 drop`
- nginx: `deny 119.152.228.240;`
WAF Rules:
- Cloudflare: Block with expression `ip.src eq 119.152.228.240`
- AWS WAF: Add address `119.152.228.240/32`
Note: These recommendations are probabilistic and should be combined with other signals before taking action.
---
## Analyst Notes
This IP presents moderate risk primarily due to DNSBL listings. The absence of services, open ports, and active threat indicators suggests the address may be reserved, decommissioned, or used for non-public-facing infrastructure. The subnet context is clean, reducing likelihood of coordinated malicious activity. Continuous monitoring recommended if traffic from this source is observed.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Munir Ahmed |
| ASN | AS136525 |
| Network Name | PTCL |
| CIDR Block | 119.152.192.0/18 |
| RIR | APNIC |
| Country | PK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS136525 |
| Network Prefix | 119.152.228.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 13% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 19% | 6 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-15 10:08:22 UTC |
| Last Seen | 2026-07-27 20:59:42 UTC |
| Profile Built | 2026-08-30 21:08:12 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 119.152.228.240
Who owns the IP address 119.152.228.240?
119.152.228.240 is registered to Munir Ahmed. The address falls within the 119.152.192.0/18 network block. Registration is held at APNIC.
Where is 119.152.228.240 located?
Geolocation data places 119.152.228.240 in Pakistan. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 119.152.228.240 malicious or safe?
119.152.228.240 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.