39.35.222.237📋 Copy

# IP Intelligence Briefing: 39.35.222.237/32

Classification: Moderate Risk | Generated: 2026-07-29

## Executive Summary

IP address 39.35.222.237 is a Pakistan Telecommunication Company Limited (PTCL) infrastructure endpoint assigned to the PTCLBB-PK network. The IP registers a moderate risk score of 40/100 and appears as a firewalled endpoint with no active services. Historical data shows listing activity on 8 DNS blacklists with 2 high-severity entries as of 2026-07-29. The IP is classified as clean within its /24 neighborhood despite showing blacklist presence.

## Network Infrastructure

## Threat Assessment

• Abuse Confidence: Not scored
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Blacklist Status: Listed on 2 of 8 DNSBLs
• Campaign Likelihood: Not detected
• Control Plane: BGP prefix 39.35.192.0/19, route stability flagged as false, RPKI state unknown

Key Observations:

• No open ports detected; services classification: "Firewalled / No Services"
• DNSSEC validation: Valid
• PTR records: None resolved
• No associated threat indicators or campaigns identified

## Neighborhood Analysis

• Subnet: 39.35.222.237/24
• Abuse Density: 0 (Clean classification)
• Total Siblings: 2
• Threat Siblings: 0
• High-Risk Neighbors: 0
• Notable Neighbor: 39.35.222.110 (Risk Score: 15/100, Authority Score: 50)

## Behavioral History

• Observation Count: 11 signals
• Recent Activity: 2026-07-29
• Listings: 8 total, 2 high-severity
• Ownership Changes: 0
• Threat Persistence: 0 days
• Persistent Malicious Activity: False

## Recommended Actions

Given the moderate risk profile and blacklist presence, defensive measures are recommended:

## Intelligence Notes

The IP appears to be part of legitimate telecommunications infrastructure (PTCLBB-PK) but shows blacklist presence inconsistent with its clean neighborhood classification. The geolocation discrepancy (FR vs PK registry) may indicate routing anomalies or misattribution. No active threat campaigns or attack patterns detected. Monitor for changes in blacklist status or emergence of open services.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.