2.49.129.93📋 Copy

# IP INTELLIGENCE BRIEFING: 2.49.129.93/32

Classification: LOW RISK | Risk Score: 0/10 | Date: 2026-07-28

## EXECUTIVE SUMMARY

The IP address 2.49.129.93 presents a low-risk profile with no active threat indicators. The address is currently firewalled with no services detected. While geolocation data shows conflicts between reported locations, no malicious activity has been observed.

## OWNERSHIP AND REGISTRATION

• ASN: 5384
• Organization: Arif Khalid
• Network Name: ETISALATADSL-EMIRNET
• CIDR Block: 2.49.128.0/21
• RIR: RIPE
• Abuse Contact: Available via RDAP

## GEOLLOCATION ANALYSIS

Conflicting geolocation data detected:

• Reported Location 1: US, Massachusetts, Boston
• Reported Location 2: UAE, Dubai
• Geo Consensus: False
• Geo Plausible: False

This inconsistency warrants monitoring but does not indicate malicious activity.

## THREAT INDICATORS

• Threat Indicators: None
• Blacklist Count: 0
• Abuse Confidence Score: Not applicable
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False

## NETWORK CHARACTERISTICS

• Services: Firewalled / No Services Detected
• Open Ports: None
• TLS Certificates: None
• PTR Hostname: bba-2-49-129-93.alshamil.net.ae
• DNS Resolution: Confirmed
• DNSSEC Valid: True

## NEIGHBORHOOD ANALYSIS

• Subnet: 2.49.129.93/24
• Abuse Density: 0%
• Total Siblings: 0
• Threat Siblings: 0
• Risk Distribution: No high/medium/low risk neighbors

## OBSERVATION HISTORY

• Total Observations: 15
• Recent Activity: Ownership and org data observed 2026-07-28
• Threat Persistence: 0 days
• Is Persistently Malicious: False
• Ownership Changes: 0

## RELATIONSHIP GRAPH

• DNS Associations: bba-2-49-129-93.alshamil.net.ae (2 entries)
• Network Relationships: ETISALATADSL-EMIRNET

## RECOMMENDATIONS

Based on current risk assessment, the following actions are recommended:

1. Monitor Geolocation Consistency: The conflicting US/UAE location data should be monitored. Investigate why the same IP resolves to different geographic locations.

2. Standard Classification: The IP can be classified as LOW RISK for SOC alerting thresholds.

3. No Immediate Blocking: No firewall rules or blocking actions are recommended at this time.

4. DNS Monitoring: The hostname "alshamil.net.ae" should be monitored if the organization has a legitimate presence in that domain.

5. Baseline Establishment: Use current observations (risk score 0, no services, no threats) as baseline for future comparison.

## ASSESSMENT

This IP address presents no immediate security concerns. The low risk score, absence of threat indicators, and clean neighborhood profile suggest benign activity. The primary concern is the geolocation inconsistency, which should be noted but does not require immediate remediation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.