223.123.90.65📋 Copy

# IP Intelligence Briefing: 223.123.90.65

Classification: Low Risk / Minimal Threat

Date: 2026-07-28

Analysis Period: Current observation window

## Executive Summary

IP address 223.123.90.65 presents a low risk profile (risk score: 25) with minimal operational activity. The address belongs to CMPak Mobile Limited's fixed network infrastructure and exhibits no active services or open ports. While geolocation data shows conflicting indicators (France/Pakistan), the subnet demonstrates clean abuse density and no known malicious associations.

## Risk Assessment

• Overall Risk Score: 25 (Low)
• Reputation Status: Low Risk
• Infrastructure Classification: Firewalled / No Services
• DNSBL Listings: 1 of 8 total lists
• Known Threat Indicators: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## Ownership and Network Context

Organization: CMPak-Mobile-Fixed-Network (CMPak Limited)

ASN: 59257

Network Block: 223.123.64.0/18

RIR: APNIC

Registration: 2010-07-01

## Geolocation Analysis

Conflicting geolocation data detected across multiple sources:

• Primary profile: Marseille, France (FR)
• Historical observation: Islamabad, Pakistan (PK)
• Confidence Level: 0.70 (medium)
• GeoConsensus: False
• GeoPlausible: False

The discrepancy suggests potential routing anomalies or data source inconsistencies requiring monitoring.

## Neighborhood Analysis

Subnet: 223.123.90.65/24

Abuse Density: 0

Classification: Clean

Active Siblings: 0

Threat Siblings: 0

No neighboring IPs detected in the /24 subnet indicating isolated address assignment.

## Service and Infrastructure

• Open Ports: None
• Services: None detected
• TLS Certificates: None
• HTTP Fingerprint: None
• PTR Hostnames: None
• Forward Resolution: Not confirmed
• Traceroute: 30 hops, 20 timed out, transit via Comcast

## Historical Observations (13 events)

Recent signal history indicates:

• Valid DNSSEC configuration
• Persistent ASN attribution (59257)
• One DNSBL listing with high severity classification
• No persistent malicious activity detected
• Zero threat persistence days

## Recommended Actions

Immediate: No blocking required. Risk score remains low with no active threat indicators.

Monitoring:

• Track geolocation consistency between FR/PK sources
• Monitor DNSBL listing status
• Watch for emergence of open ports or service banners

Firewall Policy: Permissive or deny-all based on organizational policy. No specific blocking rules recommended.

## Conclusion

223.123.90.65 represents infrastructure belonging to a legitimate telecom operator with no observed malicious behavior. The single DNSBL listing requires awareness but does not indicate active threat participation. Routine monitoring recommended to track geolocation consistency and service emergence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.