72.255.3.195📋 Copy

# IP Intelligence Briefing: 72.255.3.195

Classification: Low Risk / Clean

Date: 2026-07-30

Analyst: SOC Intelligence Unit

---

## Executive Summary

IP 72.255.3.195 presents as a low-risk infrastructure address with no active threat indicators. The address is assigned to CYBERNET-PK (ASN 9541) under ownership of Amjad Qasmi. Current risk assessment indicates no immediate security concerns requiring defensive action.

---

## Profile Overview

---

## Key Findings

Ownership and Network Registration

• Organization: Amjad Qasmi
• Network Name: CYBERNET-PK
• RIR: ARIN
• Abuse Contact: noc-abuse@cyber.net.pk (Available via RDAP)
• Route Stability: Route flagged as unstable; no recent route changes observed in 30-day window

Network Characteristics

• Service Status: No open ports detected; infrastructure classified as "Firewalled / No Services"
• DNS Configuration: No PTR records; no forward DNS resolution
• Email Authentication: No SPF/DMARC records detected
• SSL/TLS: No certificates observed

Threat Indicators

• Abuse Confidence: Not applicable (no abuse signals)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Status: Not listed on any feeds
• Campaign Correlation: No correlated IPs or certificate matches

---

## Neighborhood Analysis (72.255.3.0/24)

The /24 subnet demonstrates a clean security posture with minimal sibling abuse activity.

Sibling IP Risk Assessment:

• 72.255.3.135: Risk Score 25 (Low)
• 72.255.3.171: Risk Score 0 (Clean)
• 72.255.3.223: No scoring data available

---

## Historical Observation Summary

14 signal observations recorded across multiple signal types. Most recent activity from 2026-07-30 shows:

• Geolocation Signals: Consistent reporting from Marseille, FR via transit network ae1.3107.edge1.mrs3.neo.colt.net
• Ownership Signals: Repeated attribution to Amjad Qasmi / CYBERNET-PK
• Network Path: Traceroute indicates 30-hop path through Comcast transit networks
• Threat Signals: None detected across observation window

No evidence of escalating threat behavior or ownership changes.

---

## Relationship Graph

Limited relationship data available:

• Primary Link: Same Network → CYBERNET-PK
• Associated Entities: No hostnames, organizations, or certificates identified

---

## Recommended Actions

Current Risk Level: No immediate blocking required.

Monitoring Recommendations:

• Continue passive observation of subnet 72.255.3.0/24
• Monitor for emergence of open services on any sibling IPs
• Watch for changes in routing stability or geolocation consistency

Firewall Rules: None generated due to low risk profile. Standard allow/deny policies based on organizational security policy apply.

---

## Conclusion

IP 72.255.3.195 is classified as low-risk with no active threat indicators. The address operates as a firewalled infrastructure node within a clean /24 subnet showing minimal abuse density. No defensive action required at this time. Recommend maintaining baseline monitoring practices.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.