# IP Intelligence Briefing: 149.40.247.147/32
## Executive Summary
Intellectual property address 149.40.247.147 presents low-risk characteristics with no active threat indicators. The IP belongs to Transworld Associates (Pvt) Ltd. (ASN 138655) and is currently classified as "Firewalled / No Services." Risk score: 25 (Low Risk). No immediate blocking action recommended based on current threat profile.
## Ownership and Infrastructure
Organization: Transworld Associates (Pvt) Ltd.
ASN: 138655
Network: TRANSWORLD-CGNT-NET-1
CIDR Block: 149.40.128.0/17
Geolocation: US (Punjab, Lahore) — with conflicting Pakistan geolocation signals observed in historical data
RIR: ARIN
Registration Date: Not available
## Threat Profile
Overall Risk Score: 25 (Low Risk)
Threat Indicators: None detected
- Not identified as Tor exit node
- Not flagged as known attacker
- Not classified as spam source
- Blacklist count: 0
- Known campaigns: None associated
- Threat feeds: None
Control Plane Assessment:
- Route stability: Unstable
- DNSBL listings: 1 of 8 total lists
- RPKI state: Not available
- IRR consistency: Not available
## Network Services and DNS
Open Ports: None detected
DNS Resolution: No PTR hostnames, no forward resolution
Reverse DNS: Not configured
HTTP/HTTPS: No active services responding
Email Authentication: No SPF or DMARC records associated
## Neighborhood Analysis (149.40.247.0/24)
Subnet: 149.40.247.0/24
Total Neighbors: 9
Abuse Density: 0%
Risk Distribution:
- High Risk: 0
- Medium Risk: 1
- Low Risk: 5
Notable Neighbors:
- 149.40.247.107: Risk Score 40, Authority Score 50
- 149.40.247.53: Risk Score 25, Authority Score 50
- 149.40.247.167: Risk Score 25, Authority Score 50
## Historical Observations
Observation Count: 11 signals tracked
Temporal Analysis:
- Ownership changes: 0
- Threat persistence days: 0
- Persistently malicious: No
Geolocation Signals:
- Pakistan (Islamabad): 0.95 confidence
- US (Kansas region): 0.35 confidence
- Consensus: Mixed geolocation signals indicate routing anomalies or misconfigured geo-databases
Behavioral Signals:
- Honeypot hits: 0
- Enumeration strikes: 0
- WAF violations: 0
- Total incidents: 0
## Relationship Graph
Connected Entities:
- TRANSWORLD-CGNT-NET-1 (Same Network) — 3 relationship links
## Recommended Actions
Current Recommendations: None
Firewall Rules: Not required at this time
Risk-Based Decision: Monitor but do not block
Suggested Monitoring Parameters:
- Track geolocation consistency
- Watch for service activation on this IP
- Monitor subnet 149.40.247.0/24 for elevated activity
- Reassess if neighbor 149.40.247.107 (risk score 40) exhibits increased threat activity
## Conclusion
IP 149.40.247.147 maintains a low-risk profile with no active malicious indicators. The IP is currently firewalled with no open services. Geolocation inconsistencies between US and Pakistan signals warrant periodic validation but do not indicate immediate threat. Standard monitoring procedures apply; no defensive action required at present.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Transworld Associates (Pvt) Ltd. |
| ASN | AS138655 |
| Network Name | TRANSWORLD-CGNT-NET-1 |
| CIDR Block | 149.40.128.0/17 |
| RIR | ARIN |
| Country | Pakistan |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS138655 |
| Network Prefix | 149.40.247.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-07 06:27:07 UTC |
| Last Seen | 2026-08-27 02:49:26 UTC |
| Profile Built | 2026-08-29 06:23:36 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 17 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 149.40.247.147
Who owns the IP address 149.40.247.147?
149.40.247.147 is registered to Transworld Associates (Pvt) Ltd.. The address falls within the 149.40.128.0/17 network block. Registration is held at ARIN.
Where is 149.40.247.147 located?
Geolocation data places 149.40.247.147 in Lahore, Punjab, Pakistan. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 149.40.247.147 malicious or safe?
149.40.247.147 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.