149.54.72.138
# IP Intelligence Briefing: 149.54.72.138
Classification: Moderate Risk | Risk Score: 55 | Date: Current
## Executive Summary
IP 149.54.72.138 is a US-based infrastructure address assigned to organization Abdul Sattar Hadeed (ASN 55330, GCN-DCN). The address demonstrates moderate risk characteristics with firewalled status and limited observable threat indicators. Neighborhood analysis reveals low-to-moderate risk sibling IPs within the /24 subnet.
## Technical Profile
Ownership & Registration:
- Organization: Abdul Sattar Hadeed
- ASN: 55330
- Netname: GCN-DCN
- CIDR: 149.54.0.0/17
- RIR: ARIN
- Abuse Contact: net.security@afghantelecom.af
Geolocation:
- Country: United States (US)
- Region: New Jersey
- City: Newark
- Note: Geolocation consensus shows discrepancies (claimed coordinates suggest Middle Eastern origin; distance 5,137 km from reported location)
Network Characteristics:
- Service Status: Firewalled / No Services
- Open Ports: None observed
- DNS: No PTR records; forward resolution unconfirmed
- TLS/SSL: No certificates detected
- HTTP: No title or banner information
## Threat Assessment
Risk Indicators:
- Risk Score: 55 (Moderate Risk)
- Blacklist Status: 3 DNSBL listings out of 8 total lists
- Known Threats: No active campaigns, no known attacker indicators
- Tor/Proxy: Not identified as Tor exit node, proxy, or CDN
- Abuse Confidence: Low (operator score: 0.1304)
Control Plane:
- Route Stability: Route changes detected (isRouteStable: false)
- BGP Prefix: 149.54.72.0/24
- RPKI: State not determined
- DNSSEC: Valid
## Observation History
Monitoring Activity: 14 signals observed
Recent Observations:
- July 27, 2026 15:13: Geolocation signal (lat: 33, lon: 66, distance: 5,137 km)
- July 27, 2026 15:12: Port scanning activity detected; multiple ports probed
- July 27, 2026 15:11: Traceroute completed (18 hops, transit via Comcast)
- July 27, 2026 15:08: Ownership registration data retrieved
Temporal Analysis: No persistent malicious behavior detected; threat observation count remains at zero.
## Neighborhood Analysis
Subnet: 149.54.72.0/24
Abuse Density: 0
Risk Distribution: 1 Medium, 1 Low
Sibling IPs:
- 149.54.72.141: Risk Score 25, Authority Score 50 (Low-Medium Risk)
- 149.54.72.142: Risk Score 40, Authority Score 50 (Medium Risk)
## Relationship Graph
Associated Entities: 2
- GCN-DCN: Network association (Same Network)
## Recommended Actions
1. Monitor: Track port scanning activity and geolocation discrepancies
2. Block: Consider blocking if internal resources require protection; current risk level warrants cautious approach
3. Investigate: Correlate with organization's abuse contact for clarification on IP usage
4. Monitor Siblings: Watch 149.54.72.141 and 149.54.72.142 for escalating risk patterns
## Intelligence Confidence
Data Sources: 2 geolocation sources, multiple signal types
Confidence Level: Moderate
Last Updated: Current cycle
---
*Generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Abdul Sattar Hadeed |
| ASN | AS55330 |
| Network Name | GCN-DCN |
| CIDR Block | 149.54.0.0/17 |
| RIR | ARIN |
| Country | AF |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS55330 |
| Network Prefix | 149.54.72.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 23% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 23% | 2 | 4 |
| reputation | 20% | 1 | 3 |
| geolocation | 12% | 2 | 2 |
| Overall | 16% | 10 | 16 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-14 09:42:52 UTC |
| Last Seen | 2026-09-02 23:54:18 UTC |
| Profile Built | 2026-09-03 00:00:44 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 27 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 149.54.72.138
Who owns the IP address 149.54.72.138?
149.54.72.138 is registered to Abdul Sattar Hadeed. The address falls within the 149.54.0.0/17 network block. Registration is held at ARIN.
Where is 149.54.72.138 located?
Geolocation data places 149.54.72.138 in Newark, US-NJ, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 149.54.72.138 malicious or safe?
149.54.72.138 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.