39.57.38.194📋 Copy

IP INTELLIGENCE BRIEFING: 39.57.38.194/32

EXECUTIVE SUMMARY

IP 39.57.38.194 presents as a low-risk infrastructure address with minimal threat indicators. The IP belongs to Pakistan Telecommunication Company Limited (PTCL) under ASN 17557. Risk assessment scores a 25/100 with low reputation classification.

OWNERSHIP AND NETWORK CLASSIFICATION

• ASN: 17557 (PKTELECOM-AS-PK)
• Organization: Pakistan Telecommunication Company Limited, PK
• CIDR Block: 39.32.0.0/11
• RIR: APNIC
• Registration Date: 2011-03-28
• Network Name: PTCLBB-PK
• Abuse Contact: Available via RDAP

GEOLOCATION ANALYSIS

• Reported Country: France (FR)
• Region/City: Marseille
• Timezone: Europe/Paris
• Geo Consensus: True (1 source)
• Note: Geolocation data shows France, but ASN registry indicates Pakistan (PK). This discrepancy warrants validation.

THREAT INDICATORS

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not calculated
• Blacklist Status: Listed on 1 of 8 DNSBL checks
• Known Campaigns: None identified
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0

NETWORK ROLE

• Infrastructure Type: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: Not present
• HTTP Service: Not responding
• Cloud/CDN/VPN/Proxy: False
• Mobile/Residential: False
• Bogon: False

DNS ANALYSIS

• PTR Record: Not present
• Forward Resolution: None
• DNSSEC Valid: True
• Hosted Domains: 0
• Email Authentication: SPF/DMARC not detected

CONTROL PLANE

• Route Stability: False
• Route Changes (30d): 0
• RPKI State: Not available
• IRR Consistency: Not available
• DNSSEC Valid: True

HISTORY AND TEMPORAL ANALYSIS

• Observation Count: 11 signals recorded
• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: False

Recent observations indicate:

• ASN 17557 with PKTELECOM-AS-PK designation
• 8 total DNSBL listings with 1 high-severity listing
• DNSSEC validation confirmed
• No ownership transitions detected

NEIGHBORHOOD ANALYSIS (39.57.38.0/24)

• Total Siblings: 1
• Active Siblings: 1
• Abuse Density: 0
• Risk Distribution: 1 low-risk
• Neighbor: 39.57.38.42 (Risk Score: 0, Authority Score: 50)

RELATIONSHIPS

• Same Network: PTCLBB-PK (2 relationships identified)
• Related Hostnames: None
• Related Organizations: None
• Related Certificates: None

TRACERoute

• Hop Count: 12
• First Hop RTT: 0.2ms
• Last Hop RTT: 298ms
• Timed Out Hops: 2
• Transit Networks: Comcast

RECOMMENDED ACTIONS

• Monitor: Track geolocation discrepancies between ASN registry (PK) and geolocation data (FR)
• Assess: Evaluate the high-severity DNSBL listing context
• Block: No immediate blocking recommended based on low-risk classification
• Observe: Continue monitoring for service activation or threat indicators

ASSESSMENT

This IP address represents a low-risk telecommunications infrastructure endpoint. The combination of firewalled status, no open services, and minimal threat indicators suggests legitimate use. The France-Pakistan geolocation discrepancy and single DNSBL listing warrant periodic revalidation but do not currently indicate malicious activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.