# 139.135.59.166 — IP Intelligence Summary

139.135.59.166 is an IPv4 address operated by Amjad Qasmi (AS9541), geolocated to Marseille, France. As of October 17, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/139.135.59.166
- Last updated: 2026-10-17

## Ownership

- Organization: Amjad Qasmi
- Network name: CYBERNET-PK
- Allocated block: 139.135.48.0/20
- ASN: AS9541 (https://ipdebrief.com/asn/9541)
- Regional registry: ARIN

## Location

- City: Marseille
- Region: Punjab
- Country: France
- Time zone: Europe/Paris

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 139.135.59.166

**Classification:** Low Risk | **Risk Score:** 25/100 | **Report Date:** 2026-07-28

\---

\## Executive Summary

The target IP address 139.135.59.166 presents a low-risk threat profile with no active malicious indicators. The address belongs to CYBERNET-PK (ASN 9541), a network registered to Amjad Qasmi under ARIN. No evidence of hosting services, proxy behavior, or known campaign activity was observed during analysis.

\---

\## Ownership and Network Registration

| Field | Value |

|-------|-------|

| **ASN** | 9541 |

| **Organization** | Amjad Qasmi |

| **Netname** | CYBERNET-PK |

| **CIDR Block** | 139.135.48.0/20 |

| **RIR** | ARIN |

| **Abuse Contact** | noc-abuse@cyber.net.pk |

\---

\## Geolocation Analysis

Geographic data shows inconsistencies across data sources:

\- **Primary consensus:** Pakistan (PK), Lahore, Punjab

\- **Alternative source:** France (FR), Marseille

\- **Geo Consensus:** False (multiple conflicting sources)

This discrepancy warrants monitoring but does not indicate active manipulation.

\---

\## Threat Indicators Assessment

| Indicator | Status |

|-----------|--------|

| Known Attacker | No |

| Tor Exit Node | No |

| Spam Source | No |

| Blacklist Count | 0 |

| Pulsedive Risk | Not Applicable |

| Known Campaigns | None |

| DNSBL Listed | 1 of 8 lists |

**Abuse Confidence Score:** Not reported | **Threat Feeds:** Empty

\---

\## Network Role Classification

\- **Infrastructure Type:** Not classified

\- **Service Purpose:** Firewalled / No Services

\- **Open Ports:** None detected

\- **CDN/Cloud/VPN/Proxy:** No

\- **Hosting Provider:** No

\---

\## Neighborhood Analysis

**Subnet:** 139.135.59.0/24

| Metric | Value |

|--------|-------|

| Abuse Density | 0 (None) |

| Threat Siblings | 0 |

| Active Siblings | 0 |

| Total Siblings | 1 |

**Neighbor IP:** 139.135.59.193 (Risk Score: 0)

The /24 subnet demonstrates minimal abuse activity with no correlated malicious neighbors.

\---

\## Temporal Analysis

\- **Ownership Changes:** 0

\- **Threat Persistence Days:** 0

\- **Threat Observation Count:** 0

\- **Persistently Malicious:** No

\---

\## Observation History Summary

13 total observations recorded. Most recent activity (2026-07-28) includes:

\- Network classification signals

\- ASN registration data

\- Geolocation updates

No escalation in risk signals observed over time.

\---

\## Recommended Actions

**Firewall/Blocking:** Not required. IP does not meet threat thresholds.

**Monitoring:** Optional. Given DNSBL listing on 1 of 8 lists and geolocation inconsistencies, standard traffic logging is sufficient.

**Investigation Priority:** Low. No active threat indicators or attack patterns detected.

\---

\## Conclusion

IP 139.135.59.166 represents a low-risk network asset with no active malicious activity. The address shows no evidence of being used for command and control, spam distribution, or other known threat campaigns. Standard network monitoring practices are appropriate; no additional blocking or investigation actions are recommended at this time.

## Nearby addresses

- 139.135.59.36 (https://ipdebrief.com/139.135.59.36)
- 139.135.59.124 (https://ipdebrief.com/139.135.59.124)
- 139.135.59.133 (https://ipdebrief.com/139.135.59.133)
- 139.135.59.138 (https://ipdebrief.com/139.135.59.138)
- 139.135.59.193 (https://ipdebrief.com/139.135.59.193)
- 139.135.59.233 (https://ipdebrief.com/139.135.59.233)

---

Source: IPDebrief, "139.135.59.166 IP intelligence", https://ipdebrief.com/139.135.59.166, updated 2026-10-17. Assessments are probabilistic.