139.135.59.166
139.135.59.166 is an IPv4 address operated by Amjad Qasmi (AS9541), geolocated to Marseille, France. As of October 17, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP Intelligence Briefing: 139.135.59.166
Classification: Low Risk | Risk Score: 25/100 | Report Date: 2026-07-28
---
## Executive Summary
The target IP address 139.135.59.166 presents a low-risk threat profile with no active malicious indicators. The address belongs to CYBERNET-PK (ASN 9541), a network registered to Amjad Qasmi under ARIN. No evidence of hosting services, proxy behavior, or known campaign activity was observed during analysis.
---
## Ownership and Network Registration
| Field | Value |
|---|---|
| **ASN** | 9541 |
| **Organization** | Amjad Qasmi |
| **Netname** | CYBERNET-PK |
| **CIDR Block** | 139.135.48.0/20 |
| **RIR** | ARIN |
| **Abuse Contact** | noc-abuse@cyber.net.pk |
---
## Geolocation Analysis
Geographic data shows inconsistencies across data sources:
- Primary consensus: Pakistan (PK), Lahore, Punjab
- Alternative source: France (FR), Marseille
- Geo Consensus: False (multiple conflicting sources)
This discrepancy warrants monitoring but does not indicate active manipulation.
---
## Threat Indicators Assessment
| Indicator | Status |
|---|---|
| Known Attacker | No |
| Tor Exit Node | No |
| Spam Source | No |
| Blacklist Count | 0 |
| Pulsedive Risk | Not Applicable |
| Known Campaigns | None |
| DNSBL Listed | 1 of 8 lists |
Abuse Confidence Score: Not reported | Threat Feeds: Empty
---
## Network Role Classification
- Infrastructure Type: Not classified
- Service Purpose: Firewalled / No Services
- Open Ports: None detected
- CDN/Cloud/VPN/Proxy: No
- Hosting Provider: No
---
## Neighborhood Analysis
Subnet: 139.135.59.0/24
| Metric | Value |
|---|---|
| Abuse Density | 0 (None) |
| Threat Siblings | 0 |
| Active Siblings | 0 |
| Total Siblings | 1 |
Neighbor IP: 139.135.59.193 (Risk Score: 0)
The /24 subnet demonstrates minimal abuse activity with no correlated malicious neighbors.
---
## Temporal Analysis
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: No
---
## Observation History Summary
13 total observations recorded. Most recent activity (2026-07-28) includes:
- Network classification signals
- ASN registration data
- Geolocation updates
No escalation in risk signals observed over time.
---
## Recommended Actions
Firewall/Blocking: Not required. IP does not meet threat thresholds.
Monitoring: Optional. Given DNSBL listing on 1 of 8 lists and geolocation inconsistencies, standard traffic logging is sufficient.
Investigation Priority: Low. No active threat indicators or attack patterns detected.
---
## Conclusion
IP 139.135.59.166 represents a low-risk network asset with no active malicious activity. The address shows no evidence of being used for command and control, spam distribution, or other known threat campaigns. Standard network monitoring practices are appropriate; no additional blocking or investigation actions are recommended at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Amjad Qasmi |
| ASN | AS9541 |
| Network Name | CYBERNET-PK |
| CIDR Block | 139.135.48.0/20 |
| RIR | ARIN |
| Country | PK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS9541 |
| Network Prefix | 139.135.59.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 8% | 1 | 1 |
| Overall | 12% | 9 | 12 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-19 12:01:46 UTC |
| Last Seen | 2026-10-06 07:03:33 UTC |
| Profile Built | 2026-10-17 10:14:01 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 139.135.59.166
Who owns the IP address 139.135.59.166?
139.135.59.166 is registered to Amjad Qasmi. The address falls within the 139.135.48.0/20 network block. Registration is held at ARIN.
Where is 139.135.59.166 located?
Geolocation data places 139.135.59.166 in Marseille, Punjab, France. The local time zone is Europe/Paris. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 139.135.59.166 malicious or safe?
139.135.59.166 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.