203.128.20.114📋 Copy

# IP Intelligence Briefing: 203.128.20.114/32

Date: July 24, 2026

IP Address: 203.128.20.114

Classification: Low Risk / Infrastructure

---

## Executive Summary

IP 203.128.20.114 is classified as a low-risk infrastructure endpoint belonging to IRT-BRAINNET-PK (ASN 134489), an APNIC-registered organization. The IP shows no active threat indicators, no open services, and no blacklist listings. Current risk score is 0, with minimal operator classification.

---

## Network Profile

## Geolocation Analysis

Geolocation data shows conflicting signals:

• Reported Country: France (FR)
• Reported Region: Khyber Pakhtunkhwa
• Reported City: Marseille
• Claimed Coordinates: 34.3082°N, 72.209°E (Pakistan)
• Geolocation Plausibility: True (Pakistan coordinates)
• Geo Source Count: 2

Note: Significant geolocation discrepancy between country code (FR) and region/city data indicating Pakistan. This warrants monitoring but does not constitute immediate threat.

---

## Threat Indicators

• Risk Score: 0
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Association: None identified
• Threat Feeds: None

Threat Assessment: No active threat indicators detected.

---

## Network Services

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None
• Network Role: Firewalled / No Services
• Cloud/CDN/VPN/Proxy: No

Service Assessment: IP appears to be firewalled with no public-facing services.

---

## DNS Analysis

• Reverse DNS: 203-128-20-114.braintel.net.pk
• Forward Resolution: Confirmed (1 host)
• Domain: net.pk
• SPF Record: None
• DMARC Record: None
• TXT Records: 0

DNS Assessment: Standard reverse DNS resolution present. No email authentication records configured.

---

## Neighborhood Analysis (203.128.20.0/24)

Notable Neighbors:

• 203.128.20.10: Risk Score 70, Authority Score 50 (Elevated Risk)
• 203.128.20.158: Risk Score 25, Authority Score 50 (Low-Moderate Risk)
• 203.128.20.166: Risk Score 0, Authority Score 50 (Clean)

Neighborhood Assessment: Subnet shows mixed risk profile. One neighbor (203.128.20.10) exhibits elevated risk (70) and should be monitored separately.

---

## Relationship Graph

• Same Network: BRAINNET-PK (2 entries)
• DNS Associations: 203-128-20-114.braintel.net.pk (3 entries)

Relationship Assessment: Standard network and DNS relationships. No unusual associations detected.

---

## Observation History

• Total Observations: 18
• Recent Activity: July 24, 2026 (multiple signals)
• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No

Temporal Assessment: IP shows stable ownership with no persistent malicious activity. Recent observations include geolocation validation, network role classification, and control plane operator scoring.

---

## Control Plane Data

• Route Stable: No
• Operator Score: 0.1304 (Minimal)
• IRR Consistency: Not assessed
• BGP Prefix: 203.128.20.0/24
• DNSSEC Valid: Yes
• DNSBL Listed: 0/8 lists

---

## Recommended Actions

No specific firewall rules or blocking recommendations generated. The IP presents minimal threat and is not currently flagged for action.

Suggested Monitoring:

1. Monitor neighbor 203.128.20.10 for continued elevated risk activity

2. Track geolocation consistency (France vs. Pakistan discrepancy)

3. Review for any emerging services or port openings

---

## Conclusion

IP 203.128.20.114

is currently not presenting an immediate threat to your network infrastructure. However, the subnet's mixed risk profile and the geolocation inconsistency between reported country codes and regional data warrant periodic review as part of routine threat intelligence monitoring. No blocking or filtering actions are recommended at this time based on current data.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.