39.56.75.99📋 Copy

# IP Intelligence Briefing: 39.56.75.99/32

Classification: Low Risk | Risk Score: 25 | Date: 2026-07-29

## Executive Summary

IP address 39.56.75.99 presents a low-risk profile with no active threat indicators. The address operates within the PTCLBB-PK network infrastructure (ASN 17557) and demonstrates stable operational characteristics. No malicious activity, spam sources, or known attack campaigns were observed during analysis.

## Ownership and Network Infrastructure

• ASN: 17557 (PTCLBB-PK - Munir Ahmed)
• CIDR Block: 39.32.0.0/11
• RIR: APNIC
• Geolocation: France (Marseille) with Pakistan regional classification
• Network Classification: Firewalled / No Services

## Threat Assessment

• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Status: 0 direct listings
• DNSBL Status: Listed on 1 of 8 total blacklists (minor concern)
• Abuse Confidence Score: Not available
• Campaign Association: None identified

## Network Behavior and Services

• Open Ports: None detected
• Active Services: None
• TLS Certificates: None
• HTTP Banner: None
• DNS Records: No PTR hostnames, no forward resolution
• Email Authentication: SPF and DMARC not configured (no hosted domains)

## Neighborhood Analysis (39.56.75.0/24)

• Abuse Density: 0%
• Classification: Clean
• Siblings: 1 total, 0 active, 0 threats
• Risk Distribution: No high/medium risk neighbors detected
• Inherited Risk: 0

## Control Plane and Routing

• BGP Prefix: 39.56.72.0/21
• Route Stability: Unstable
• DNSSEC: Valid
• IRR Consistency: Not available
• RPKI State: Not available
• Operator Score: 0.1304 (Minimal)

## Temporal Analysis

• Observations: 12 total
• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No
• Average Ownership Days: Not available

## Recommended Actions

No specific firewall rules or blocking recommendations. The IP presents minimal risk to defensive operations. Standard network monitoring practices are sufficient.

---

Intelligence Note: The IP demonstrates stable, low-risk characteristics. Geographic data shows some inconsistency (France coordinates with Pakistan region designation), which may warrant periodic verification but does not indicate malicious activity. The single DNSBL listing should be reviewed if the IP begins exhibiting suspicious behavior.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.