# THREAT INTELLIGENCE BRIEFING
IP Address: 124.45.39.194/32
Classification: Legitimate Infrastructure - Low Risk
Report Date: 2026-07-25
Analyst: Automated Intelligence System
---
## EXECUTIVE SUMMARY
IP address 124.45.39.194 is classified as Low Risk with a risk score of 0. The address is owned by Japan Network Information Center (XEPHION, ASN 9595) and is associated with residential/proxy infrastructure in Shuku, Okayama, Japan. No malicious indicators, threat activity, or abuse patterns were detected across all observation periods. Recommended action: NO ACTION REQUIRED - allow normal traffic flow.
---
## OWNERSHIP & INFRASTRUCTURE
| Attribute | Value |
|---|---|
| **ASN** | 9595 |
| **Organization** | Japan Network Information Center |
| **Netname** | XEPHION |
| **CIDR Block** | 124.45.32.0/19 |
| **RIR** | APNIC |
| **Geolocation** | Japan, Okayama Prefecture, Shuku |
| **Timezone** | Asia/Tokyo |
| **DNS PTR** | g194.124-45-39.ppp.wakwak.ne.jp |
The IP resolves to a PPPoE hostname associated with Wakwak, a Japanese residential internet service provider. Network classification indicates "Firewalled / No Services" with no open ports detected during scanning.
---
## THREAT INDICATORS
Current Threat Profile:
- Abuse Confidence Score: None detected
- Blacklist Count: 0
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Known Campaigns: None
- Threat Feeds: Empty
Control Plane Analysis:
- Route Stability: Unstable (isRouteStable: false)
- BGP Prefix: 124.45.0.0/18
- RPKI State: Not validated
- DNSSEC: Valid
- DNSBL Listed: 0/8 lists
- Operator Score: 0.2609 (Basic)
---
## NEIGHBORHOOD ANALYSIS
Subnet: 124.45.39.0/24
- Abuse Density: 0.0% (Clean)
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- Risk Distribution: No high/medium risk neighbors detected
The /24 subnet demonstrates minimal activity with no adjacent IPs showing malicious behavior.
---
## OBSERVATION HISTORY
Data Points: 20 observations
- Recent Activity (2026-07-25): Multiple scans and resolution checks conducted
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: False
Historical signals indicate consistent benign behavior with no escalation patterns.
---
## NETWORK RELATIONSHIPS
12 relationships identified:
- Network Associations: XEPHION (multiple entries)
- DNS Associations: g194.124-45-39.ppp.wakwak.ne.jp (multiple entries)
- No cross-network or organizational ties to known threat actors
---
## RECOMMENDED ACTIONS
| Recommendation | Priority | Status |
|---|---|---|
| Allow Traffic | LOW | No action needed |
| Block Traffic | NONE | Not recommended |
| Monitor Closely | NONE | No indicators warranting attention |
| Add to Watchlist | NONE | Not required |
Firewall Rules: None recommended
Risk Score: 0/100 (No threat)
---
## TRACERoute SUMMARY
- Hop Count: 16
- First Hop RTT: 0.3ms
- Last Hop RTT: 214.7ms
- Timed Out Hops: 3
- Transit Networks: Comcast
---
## CONCLUSION
IP 124.45.39.194 represents legitimate Japanese residential infrastructure with no observable malicious activity. The address demonstrates clean neighborhood metrics, valid infrastructure controls, and no correlation with threat campaigns. Standard allow rules apply for this IP.
SOC Analyst Notes: No immediate action required. Continue standard monitoring procedures.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Japan Network Information Center |
| ASN | AS9595 |
| Network Name | XEPHION |
| CIDR Block | 124.45.32.0/19 |
| RIR | APNIC |
| Country | JP |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | g194.124-45-39.ppp.wakwak.ne.jp |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | g194.124-45-39.ppp.wakwak.ne.jp |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS9595 |
| Network Prefix | 124.45.0.0/18 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 38% | 2 | 4 |
| Overall | 24% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 19:39:35 UTC |
| Last Seen | 2026-09-29 03:06:05 UTC |
| Profile Built | 2026-08-29 02:12:12 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 124.45.39.194
Who owns the IP address 124.45.39.194?
124.45.39.194 is registered to Japan Network Information Center. The address falls within the 124.45.32.0/19 network block. Registration is held at APNIC.
Where is 124.45.39.194 located?
Geolocation data places 124.45.39.194 in Yame, 40, Japan. The local time zone is Asia/Tokyo. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 124.45.39.194 malicious or safe?
124.45.39.194 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 124.45.39.194?
The reverse DNS (PTR) record for 124.45.39.194 is g194.124-45-39.ppp.wakwak.ne.jp. This hostname is forward-confirmed, meaning it resolves back to the same address.