37.111.149.182📋 Copy

# IP Intelligence Briefing: 37.111.149.182/32

## Executive Summary

The target IP address 37.111.149.182 is associated with Telenor Pakistan (Pvt) Ltd (ASN24499, TPP-PK) and classified as mobile carrier infrastructure. Current risk assessment indicates LOW RISK (Risk Score: 0). The IP demonstrates minimal threat indicators with no blacklist entries and a clean subnet neighborhood.

## Profile Analysis

Ownership & Network Classification:

• ASN: 24499 (Telenor Pakistan (Pvt) Ltd)
• Netname: TPP-PK
• CIDR: 37.111.128.0/18
• Infrastructure Type: Mobile Carrier
• Connection Classification: IsMobile = True

Reputation Metrics:

• Risk Score: 0
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Abuse Confidence Score: Not scored

Threat Indicators:

• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Threat Feeds: None detected

Network Services:

• Open Ports: None detected
• Hosted Domains: 0
• DNS PTR Hostnames: None
• Service Purpose: Firewalled / No Services

## Geolocation & Control Plane

Location Data:

• Primary Geolocation: France (FR), Marseille
• GeoConsensus: False (multiple conflicting geolocations detected)
• Historical observation also flagged Pakistan (PK), Faisalabad via Alienvault OTX

Control Plane:

• Origin ASN: 24499
• BGP Prefix: 37.111.149.0/24
• Route Stability: False
• RPKI State: Not validated
• DNSSEC: Valid

Routing Path:

• Hop Count: 13
• Transit Networks: Comcast
• Last Hop RTT: 226.9ms

## Neighborhood Assessment

Subnet: 37.111.149.0/24

• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0
• Classification: Clean
• No neighboring IPs flagged for abuse

## Observation History

14 signal observations recorded. Key observations include:

• 2026-07-30 04:34:03: Alienvault OTX observation flagged IP with has_threats = true, reputation = 0, pulse_count = 1 (pulse name not included in output)
• 2026-07-30 04:33:37: Confirmed mobile carrier infrastructure (is_mobile = true)
• 2026-07-30 04:35:18: Traceroute completed successfully (13 hops, reached target)
• 2026-07-30 04:41:09: Subnet classified as "clean" with 0 abuse density

## SOC Recommendations

Action Status: Monitor / Allow

1. No Immediate Blocking Required: Current risk profile (Score: 0) and clean neighborhood (Abuse Density: 0) indicate no immediate threat.

2. Monitor for Geolocation Discrepancies: Conflicting country assignments (FR vs PK) warrant periodic revalidation. This may indicate routing anomalies or spoofed location data.

3. Watchlist Consideration: One historical Alienvault OTX observation flagged has_threats = true. While current profile shows no active threats, maintain awareness of this IP in case of behavior changes.

4. Mobile Carrier Context: As mobile infrastructure, this IP may be used by legitimate mobile clients. Avoid broad blocking without additional context.

Firewall Rules: No specific deny rules recommended at this time. Standard allow rules apply unless additional threat intelligence emerges.

---

*Intelligence generated via IPDebrief platform. Data current as of analysis timestamp.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.