124.106.149.34📋 Copy

IP INTELLIGENCE BRIEFING: 124.106.149.34/32

Date of Analysis: 2026-06-26

---

**EXECUTIVE SUMMARY**

IP address 124.106.149.34/32 is a mobile-originated IP from the Philippines with a moderate risk score of 40. The address is assigned to IRT-PLDT-PH (Philippine Long Distance Telephone Company, ASN 9299) and is associated with PLDT/Smart mobile carrier infrastructure (MCC 515, MNC 03). No open services were detected on this address.

---

**RISK PROFILE**

• Overall Risk Score: 40 (Moderate Risk)
• Provider Score: 0
• Authority Score: 0
• Geolocation: Philippines, Makati City (confidence: 0.52, accuracy radius: 600km)
• Network Classification: Mobile (LTE/5G)
• Service Status: Firewalled / No Services Detected

---

**THREAT INDICATORS**

• Blacklist Status: Clean (0 blacklist matches)
• DNSBL Listings: 2 of 8 total lists
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

---

**NETWORK CONTEXT**

• Origin ASN: AS9299 (IRT-PLDT-PH)
• BGP Prefix: 124.106.128.0/19
• Control Plane: Route stability flagged as false
• DNSSEC: Valid
• Same Network Relationships: 10 ADSL network associations identified

---

**NEIGHBORHOOD ANALYSIS**

• Subnet: 124.106.149.34/24
• Abuse Density: 0.0
• Sibling IPs: 0 detected
• Threat Siblings: 0
• Classification: Clean subnet environment

---

**OBSERVATION HISTORY**

Sixteen historical observations were recorded. Key findings:

• Recent Signals (2026-06-26): Geolocation data from Philippines with 0.52 confidence
• Historical Signals: Earlier observations (2026-06-06) indicate ASN 9299 association with Makati City, Philippines. Some historical signals flagged threat presence (has_threats: true) with 6 associated threat pulses.
• Persistence: Zero threat persistence days; not persistently malicious.

---

**RECOMMENDED ACTIONS**

Based on the moderate risk profile, the following controls are recommended:

---

**INTELLIGENCE ASSESSMENT**

This IP address represents a mobile-originated connection from Philippine mobile infrastructure. While no active threat indicators were detected, historical data shows prior threat associations. The moderate risk score (40) combined with historical threat signals warrants monitoring. The subnet environment remains clean with no neighboring abuse activity. SOC analysts should evaluate connection patterns and consider blocking if this IP demonstrates malicious behavior in conjunction with other threat intelligence.

---

Classification: Moderate Risk

Recommendation: Monitor or Block based on operational context

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.