149.50.97.159📋 Copy

# IP INTELLIGENCE BRIEFING: 149.50.97.159/32

## Executive Summary

IP address 149.50.97.159 is associated with MEVSPACE (AS201814), a Warsaw, Poland-based hosting network. The IP presents a Low Risk profile with a risk score of 25/100. No active threat indicators, open services, or malicious activity observed. Recommended action: Monitor only; no immediate blocking required.

---

## Risk Assessment

---

## Ownership & Network Information

• Organization: MEVSPACE
• ASN: 201814
• Network Name: MEVERYWHERE-CGNT-NET-1
• CIDR Block: 149.50.96.0/19
• Country: Poland (PL)
• City: Warsaw
• RIR: ARIN
• Abuse Contact: abuse@mevspace.com

---

## Technical Profile

• Network Role: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• DNS Resolution: Inactive (no PTR records, no forward resolution)
• Hosted Domains: 0
• Email Authentication: SPF/DMARC not configured

---

## Threat Indicators

• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None
• Threat Feeds: No matches

---

## Control Plane Analysis

• Origin ASN: 201814
• BGP Prefix: 149.50.96.0/21
• DNSSEC Valid: Yes
• Route Stability: Unstable (isRouteStable: false)
• Operator Score: 0.1304 (Minimal)
• Route Changes (30d): 0

---

## Geolocation Validation

• Primary Location: Warsaw, Poland (Mazovia region)
• Geo Confidence: Low (geoPlausible: false)
• Conflicting Signals: One geolocation source reported US coordinates (39.83°N, -98.58°W) with 35% confidence
• Accuracy Radius: 2500 km
• Traceroute: 30 hops, 16 timed out, last hop 131.7ms

---

## Observation History

Total Observations: 12 (most recent: 2026-07-27)

Recent signals indicate:

• Organization consistently identified as MEVSPACE
• ASN resolution intermittent (null in some records)
• Operator scores ranging from 0.13–0.15 (Minimal threat level)
• Geolocation consensus: Poland

No significant changes in threat profile over observation period.

---

## Network Relationships

• Same Network: MEVERYWHERE-CGNT-NET-1
• Related Entities: 1 (network-level association only)

---

## Neighborhood Analysis

Subnet: 149.50.97.159/24

• Total Neighbors: 1
• Neighbor IP: 149.50.97.232 (Risk Score: 0)
• Risk Distribution: 0 High, 0 Medium, 1 Low
• Abuse Density: 0%
• Threat Siblings: 0

The /24 subnet shows minimal abuse activity with no high-risk neighbors.

---

## Recommended Actions

Based on current risk profile and threat indicators:

1. Firewall: No blocking recommended. IP is not classified as malicious.

2. Monitoring: Optional passive monitoring if traffic patterns seem anomalous.

3. Threat Intel: No enrichment required; IP lacks threat indicators.

4. Reputation: Low risk classification supports permissive default policies.

---

## Intelligence Narrative

The IP address 149.50.97.159 belongs to MEVSPACE's Warsaw infrastructure and presents minimal threat characteristics. The network shows no active services, no open ports, and no threat indicators across all monitored feeds. The single DNSBL listing does not correlate with known malicious activity. Geolocation data shows Poland as the primary location despite one conflicting US coordinate report. The subnet environment demonstrates low abuse density with no high-risk neighbors.

Threat Level: LOW

Action Required: NONE

Classification: Infrastructure/Hosting (Firewalled)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.