192.140.150.235📋 Copy

# IP Intelligence Briefing: 192.140.150.235/32

Classification: Low Risk

Date of Analysis: 2026-07-27

Risk Score: 25/100

## Executive Summary

IP address 192.140.150.235 was analyzed and classified as low risk. The address belongs to the SBPL-PK network block (192.140.150.0/23) under organization "Amjad Qasmi" (ASN 9541), geolocated to Peshawar, Khyber Pakhtunkhwa, Pakistan. No malicious threat indicators, blacklist hits, or active services were detected.

## Network Ownership and Geolocation

The IP address is registered to ASN 9541 (cyber internet services (pvt) ltd.) under the organization name "Amjad Qasmi" (netname: SBPL-PK). Ownership records indicate registration through ARIN with abuse contact noc-abuse@cyber.net.pk. Geolocation data, sourced from two consensus providers, places the address in Peshawar, Pakistan (coordinates: 34.02°N, 71.51°E).

## Threat Indicators

No malicious threat indicators were observed. Specific findings include:

• Blacklist count: 0
• Known campaigns: None
• Is known attacker: False
• Is spam source: False
• Is Tor exit node: False
• Abuse confidence score: Not applicable (no abuse signals)
• Pulsedive risk: Not available

## Network Behavior and Services

Network scanning revealed no open ports or active services. The address is classified as "Firewalled / No Services." DNS analysis returned no PTR hostnames, no forward resolution, and no hosted domains. Email authentication records (SPF, DMARC) were not detected. TLS certificates and HTTP banners were not present.

## Subnet Neighborhood Analysis

The /24 subnet (192.140.150.0/24) contains four sibling IPs. All four neighbors showed low risk scores (25 or 0) with authority scores of 50. Subnet abuse density is 0. Neighbor inventory:

• 192.140.150.2: Risk 25, Authority 50
• 192.140.150.105: Risk 25, Authority 50
• 192.140.150.124: Risk 25, Authority 50
• 192.140.150.230: Risk 0, Authority 50

No threat siblings were identified within the subnet.

## Historical Observations

Fourteen signal observations were recorded for this address. The most recent observation occurred on 2026-07-27. Key temporal signals include:

• Ownership changes: 0 (stable ownership)
• Threat persistence days: 0
• Threat observation count: 0
• Is persistently malicious: False

Observations confirmed consistent geolocation and ownership data across monitoring periods with no significant changes.

## Control Plane Analysis

BGP prefix 192.140.150.0/24 shows route stability issues (isRouteStable: false). Route changes over the past 30 days: 0. RPKI state and IRR consistency were not verified. DNSSEC validation returned valid. The operator score is 0.1304 (labeled "Minimal"). The address is not classified as MOAS (Multiple Origin Address Space).

## Recommended Actions

No specific security actions or firewall rules were generated. The low risk profile and absence of malicious indicators support continued monitoring without immediate blocking or filtering.

## SOC Analyst Recommendations

• No immediate action required. IP classified as low risk with no threat indicators.
• Routine monitoring recommended as part of standard baseline operations.
• No firewall blocking or rate limiting necessary based on current threat profile.
• Subnet-wide analysis shows consistent low-risk classification across all sibling addresses.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.