205.164.156.7📋 Copy

# Threat Intelligence Briefing: 205.164.156.7

## Executive Summary

IP 205.164.156.7 is classified as Low Risk with an overall risk score of 15. The address belongs to Optix Pakistan (Pvt.) Limited (ASN 136384) and operates within a clean subnet with no observed malicious activity. However, geographic data conflicts warrant monitoring.

## Infrastructure Profile

• Organization: Optix Pakistan (Pvt.) Limited
• Netname: OPTIX-CGNT-NET-1
• ASN: 136384
• CIDR Block: 205.164.128.0/19
• Geolocation: London, GB (profile) / Sindh, Pakistan (history) — DISCREPANCY DETECTED
• Service State: Firewalled / No Services detected
• DNS Status: No PTR records, no forward resolution

## Threat Assessment

• Risk Score: 15 (Low)
• Abuse Confidence: No indicators detected
• Blacklist Status: Listed on 1 of 8 DNSBL feeds
• Threat Indicators: None
• Known Campaigns: None
• Is Tor Exit/Proxy/VPN: No
• Honeypot Hits: 0
• WAF Violations: 0

## Network Neighborhood

The /24 subnet (205.164.156.0/24) shows:

• Abuse Density: 0% (clean)
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 0
• Neighbor IP: 205.164.156.143 (Risk: 0, Authority: 50)

## Historical Observations

• Total Observations: 12
• Threat Persistence: None
• Ownership Changes: 0
• Recent Signals (2026-07-30): Geolocation conflicts observed between Pakistan and GB
• Route Stability: Unstable

## Control Plane Analysis

• BGP Prefix: 205.164.156.0/24
• Route Stable: No
• RPKI State: Not verified
• IRRC Consistency: Not verified
• DNSSEC Valid: Yes
• Operator Score: 0.1304 (Minimal)

## Relationships

• Same Network: OPTIX-CGNT-NET-1
• No Certificate/Hostname/Organization links detected

## Recommendations for SOC

1. Monitor Geographic Discrepancy: The IP's geolocation data shows conflicting locations (Pakistan vs. GB). Verify actual routing origin if this IP contacts your infrastructure.

2. Low Immediate Threat: No active threat indicators, no open services, and clean neighborhood metrics.

3. Allow with Monitoring: Given the low risk score and clean subnet, allow traffic but log connections for baseline analysis.

4. Track Route Stability: The BGP prefix shows instability; monitor for potential routing anomalies.

5. DNSBL Review: Check why the IP is listed on 1 of 8 DNSBL feeds; may be false positive or historical.

Confidence Level: Medium

Last Updated: 2026-07-30

Data Sources: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.