163.61.128.238
# IPDEBRIEF INTELLIGENCE BRIEFING
Target: 163.61.128.238/32
Classification: Low Risk Infrastructure IP
Date: 2026-07-22
---
## EXECUTIVE SUMMARY
IP 163.61.128.238 is classified as Low Risk (Risk Score: 25) with no active threat indicators. The address is associated with IRT-SWISPPL-PK (SWISPPL ISP infrastructure) in Faisalabad, Pakistan. No malicious activity, blacklisting, or campaign indicators were observed.
---
## OWNERSHIP & GEOLOCATION
- Organization: IRT-SWISPPL-PK (SWISPPL ISP)
- ASN: 153596
- BGP Prefix: 163.61.128.0/24
- Country: Pakistan (PK)
- Region: Punjab
- City: Faisalabad
- RIR: APNIC
- Abuse Contact: abuse@swis.com.pk
---
## NETWORK CHARACTERISTICS
- DNS Reverse: dyn-163-61-128-238.swis.com.pk
- Forward Resolution: Unconfirmed
- Open Ports: None detected
- Service Classification: Firewalled / No Services
- Certificate Authority (CA): DNSSEC Valid
- DNSBL Listed: 1 of 8 lists
---
## THREAT INDICATORS
| Indicator | Status |
|---|---|
| Blacklist Count | 0 |
| Tor Exit Node | No |
| Known Attacker | No |
| Spam Source | No |
| Threat Persistence | No |
| Active Campaigns | None |
| Pulsedive Risk | Not Applicable |
---
## NETWORK CONTEXT
Subnet Analysis (163.61.128.0/24):
- Abuse Density: 0 (Low)
- Total Siblings: 3
- Risk Distribution: 2 Low Risk, 0 Medium, 0 High
- Inherited Risk: 0
Related IPs:
- 163.61.128.70: Risk Score N/A
- 163.61.128.140: Authority Score 50
- 163.61.128.141: Authority Score 50
---
## OBSERVATION HISTORY
- Total Observations: 12 signals
- Signal Types: Ownership, Geolocation, Routing, General Profile
- Recent Activity: Consistent geolocation data from Pakistan
- Ownership Stability: No changes observed
- Threat Observations: 0
- Malicious Persistence: No
---
## SECURITY ACTIONS
Recommended Actions: None
- No firewall rules generated
- No blocking required
- Risk score (25) below intervention threshold
---
## RELATIONSHIP ANALYSIS
DNS Associations:
- dyn-163-61-128-238.swis.com.pk
No additional relationships detected to organizations, certificates, or other infrastructure entities.
---
## ANALYST ASSESSMENT
This IP represents legitimate ISP infrastructure with no evidence of abuse or malicious activity. The address is properly registered with APNIC, associated with a recognized Pakistani ISP (SWISPPL), and exhibits standard network behavior with no open services. The low abuse density in the /24 subnet and absence of threat indicators support classification as benign infrastructure.
SOC Recommendation: Monitor only. No blocking or mitigation actions required.
---
Data Source: IPDebrief Intelligence Platform
Confidence Level: High (Multiple validation signals)
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-SWISPPL-PK |
| ASN | AS153596 |
| Network Name | SWISPPL-PK |
| CIDR Block | 163.61.128.0/23 |
| RIR | APNIC |
| Country | PK |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | dyn-163-61-128-238.swis.com.pk |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | dyn-163-61-128-238.swis.com.pk |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS153596 |
| Network Prefix | 163.61.128.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:21:07 UTC |
| Last Seen | 2026-08-22 09:11:28 UTC |
| Profile Built | 2026-08-29 11:18:30 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 163.61.128.238
Who owns the IP address 163.61.128.238?
163.61.128.238 is registered to IRT-SWISPPL-PK. The address falls within the 163.61.128.0/23 network block. Registration is held at APNIC.
Where is 163.61.128.238 located?
Geolocation data places 163.61.128.238 in Faisalabad, Punjab, Pakistan. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 163.61.128.238 malicious or safe?
163.61.128.238 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 163.61.128.238?
The reverse DNS (PTR) record for 163.61.128.238 is dyn-163-61-128-238.swis.com.pk. This hostname is not forward-confirmed, so it should be treated as a weak signal.