IP Intelligence Briefing: 49.124.149.54
*Generated via IPDebrief Analysis*
---
**1. Risk Profile**
- Overall Risk: Low Risk (Risk Score: 0)
- Provider Score: 0 | Authority Score: 0 | Stability Score: 0
- Threat Indicators: No malicious activity detected (no blacklists, Tor, or known attacker flags).
- Network Role: Residential endpoint (DiGi Telecommunications Sdn. Bhd., Malaysia).
---
**2. Geolocation & Ownership**
- Country: Malaysia (Selangor, Shah Alam)
- ISP: DiGi IP Support (ASN: DIGI-AS-AP, APNIC)
- Subnet: 49.124.0.0/15 (part of DiGiβs network infrastructure).
---
**3. Observation History**
- Recent Activity (Last 30 Days):
- 15 observations recorded, including DNS, geolocation, and network metadata.
- No threat indicators or abuse confidence scores detected.
- DNSSEC validation confirmed for zone `54.149.124.49.in-addr.arpa`.
- No signs of C2 activity, spam, or malicious services.
---
**4. Network Relationships**
- Linked Entities:
- Subnet: `DIGI-AS-AP` (DiGi Telecommunications Sdn. Bhd.).
- No direct ties to known malicious organizations or campaigns.
- Services: No open ports, TLS certificates, or HTTP services detected.
---
**5. Subnet Neighborhood Analysis**
- Subnet: `49.124.149.54/24`
- Abuse Density: 58.8% (moderate risk).
- Neighbor Risk:
- 10 neighbors flagged as high risk (80+ score).
- 6 medium-risk (55β70) and 1 low-risk (0).
- Note: While the IP itself is clean, the subnet contains potentially compromised endpoints.
---
**6. Recommendations**
- Monitor Subnet: The subnetβs high abuse density suggests potential lateral movement risks.
- Verify Neighbors: Investigate high-risk neighbors (e.g., `49.124.149.20`, `49.124.149.47`) for correlation.
- Baseline Behavior: Confirm no unusual traffic patterns or DNS anomalies.
- Firewall Rules: No immediate blocking required for this IP, but consider subnet-level rules for high-risk neighbors.
---
End of Briefing
*Generated by IPDebrief for SOC operational use.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | DiGi IP Support |
| ASN | AS4818 |
| Network Name | DIGI-AS-AP |
| CIDR Block | 49.124.0.0/15 |
| RIR | APNIC |
| Country | MY |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 8080 | http-alt | tcp | β |
| Closed Ports | 22, 25, 80, 443, 3389, 8443 (1 open / 7 scanned) | ||
| Server | IpcWeb |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 3 |
| routing | 25% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 31% | 1 | 3 |
| geolocation | 13% | 1 | 1 |
| Overall | 25% | 8 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-16 14:59:26 UTC |
| Last Seen | 2026-06-26 18:11:23 UTC |
| Profile Built | 2026-06-08 01:01:09 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 18 |
Full dossier details are available via our API.