194.49.87.145📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

IP Address: 194.49.87.145/32

Classification: Low Risk

Date: 2026-07-23

---

## EXECUTIVE SUMMARY

IP 194.49.87.145 is a low-risk address (risk score: 25) located in Bulgaria with minimal threat indicators. The address shows firewalled behavior with no open services detected. While listed on one DNS blacklist out of 8 total evaluations, overall subnet abuse density remains at zero. No active attack patterns or persistent malicious behavior observed.

---

## TECHNICAL PROFILE

Ownership & Routing:

• Origin ASN: 201749
• BGP Prefix: 194.49.87.0/24
• Route Stability: Unstable (false)
• RIR Registry: Unavailable

Geolocation:

• Country: Bulgaria (BG)
• Coordinates: 42.73°N, 25.49°E
• Timezone: Europe/Sofia
• Accuracy Radius: 200km
• Geo Consensus: Validated

Network Services:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• Service Classification: Firewalled / No Services

DNS Resolution:

• PTR Hostnames: None
• Forward Resolution: Unconfirmed
• Hosted Domains: 0
• DNSSEC: Valid

---

## THREAT INDICATORS

Blacklist Status:

• Total DNSBL Listings: 8
• Active Listings: 1
• Maximum Severity: High
• Abuse Confidence Score: Not provided

Threat Feeds:

• Known Campaigns: None
• Is Known Attacker: False
• Is Tor Exit Node: False
• Is Proxy: False
• Is Hosting Provider: False

Behavioral Analysis:

• Total Incidents: 0
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Auto-Banned: False
• Active Attacker Status: False

---

## OBSERVATION HISTORY

Recent Activity (10 Observations):

• July 23, 2026 01:06-01:08 UTC: Multiple signals detected
• Subnet Classification: Clean (abuse density: 0)
• DNSBL Listing Signal: High severity (1 of 8 lists)
• Operator Score: 0.1304 (Minimal)
• Geo Location Signal: Confirmed Bulgaria (confidence: 0.35)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: False

---

## NETWORK NEIGHBORHOOD

Subnet Analysis (194.49.87.0/24):

• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0
• Overall Classification: Clean

Notable Neighbor:

• IP: 194.49.87.244
• Risk Score: 0
• Authority Score: 50
• Status: Low risk

---

## CONTROL PLANE DATA

BGP Routing:

• Route Changes (30d): 0
• MoAS Status: False
• RPKI State: Not assessed
• IRR Consistency: Not assessed

DNS Controls:

• DNSSEC Valid: True
• Has CAA Records: False
• Operator Score: 0.1304 (Minimal)

Traceroute Analysis:

• Hop Count: 30
• Transit Networks: Comcast
• Timed Out Hops: 18
• Last Hop RTT: 136.4ms

---

## SECURITY RECOMMENDATIONS

Current Action Status: No specific firewall or blocking rules recommended based on current risk profile. The IP address maintains a low-risk posture with no active threat indicators requiring immediate mitigation.

Monitoring Considerations:

• Continue monitoring DNSBL status (1 of 8 lists active)
• Observe subnet route stability (currently unstable)
• Monitor for any service port openings on the host
• Track historical DNSBL listing trends

---

## INTELLIGENCE CONCLUSION

IP 194.49.87.145 presents minimal threat to network infrastructure. The address exhibits firewalled behavior with no open services, zero attack indicators, and low-risk neighborhood context. While present on one DNS blacklist, the overall risk score of 25 indicates acceptable traffic levels for standard network operations. No immediate blocking or alerting action required. Continue routine monitoring and correlate with any observed connection attempts from this address against your infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.