# IP Intelligence Briefing: 39.49.238.93/32
## Executive Summary
IP address 39.49.238.93 is classified as Low Risk (Risk Score: 25). The address is associated with Pakistan Telecom infrastructure and shows no active threat indicators. No immediate defensive action is required, though the IP appears on one DNS blacklist.
## Ownership and Registration
- Organization: Munir Ahmed
- Netname: PTCLBB-PK
- ASN: 17557
- Country: Pakistan (PK)
- City: Rawalpindi
- CIDR Block: 39.32.0.0/11
- RIR: APNIC
- Abuse Contact: csirt@ptcl.net
## Network Profile
- Infrastructure Type: Firewalled / No Services
- Open Ports: None detected
- DNS Resolution: No PTR records, no forward resolution confirmed
- SSL/TLS: No certificates detected
- Cloud/CDN/Proxy: No
- Tor Exit: No
## Threat Indicators
- Abuse Confidence Score: Not available
- Blacklist Count: 1 of 8 DNS blacklists
- Known Campaigns: None
- Threat Feeds: None
- Known Attacker: No
- Spam Source: No
## Temporal Analysis
- Observation Count: 12 signals recorded
- Threat Persistence: 0 days
- Ownership Changes: 0
- Is Persistently Malicious: False
- Route Stability: False (route changes observed in 30-day window)
## Neighborhood Assessment
- Subnet: 39.49.238.93/24
- Abuse Density: 0
- Active Siblings: 0
- Threat Siblings: 0
- Inherited Risk: 0
## Relationships
- Same Network: PTCLBB-PK (2 relationships)
- Related Entities: Limited to network-level relationships
## Recommended Actions
No specific firewall rules or mitigation actions recommended at this time. The IP presents low risk with no active malicious behavior detected.
---
Analysis Notes:
- The IP is listed on 1 DNS blacklist but shows no active threat indicators
- Firewall configuration prevents service enumeration (no open ports detected)
- No evidence of persistent malicious activity or campaign involvement
- Low risk score (25/100) with no provider or authority score anomalies
- Recommended to monitor for changes in blacklist status or threat indicators
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Munir Ahmed |
| ASN | AS17557 |
| Network Name | PTCLBB-PK |
| CIDR Block | 39.32.0.0/11 |
| RIR | APNIC |
| Country | PK |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-27 09:39:32 UTC |
| Last Seen | 2026-07-30 11:55:23 UTC |
| Profile Built | 2026-07-30 12:04:34 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 16 |
Full dossier details are available via our API.