49.124.151.22📋 Copy

IP Intelligence Briefing: 49.124.151.22

Date: 2026-06-11

---

**1. Core Risk Profile**

• Risk Score: 80 (High Risk)
• Provider: DiGi IP Support (AS4818, APNIC)
• Geolocation: London, UK (GB)
• Network Role: Firewalled / No Services
• Threat Indicators:

- Listed in 5/8 DNSBLs (abuse confidence score: 0.627)

- No active malware campaigns or known attacker associations

---

**2. Observation History**

• Recent Activity (2026-06-11):

- Detected in 5 high-severity threat feeds (e.g., DNSBL listings).

- DNSSEC validation confirmed, but 4 DNSBL listings suggest potential abuse.

- BGP route stability: 0 changes in 30 days, but route stability flag is false.

---

**3. Network Relationships**

• Subnet: 49.124.151.22/24
• Neighbor Risk Distribution:

- High Risk: 32 IPs (62.7% of subnet)

- Medium Risk: 18 IPs

- Low Risk: 1 IP

• Shared Network: Part of DIGI-AS-AP (AS4818), with no direct links to known malicious entities.

---

**4. Actionable Threats**

• Immediate Mitigation:

- Block IP in firewalls (recommend `iptables` or `nftables` rules).

- Investigate subnet (49.124.151.0/24) for lateral compromises.

• Long-Term Monitoring:

- Monitor DNSBL re-listings and BGP route stability.

- Review DiGi IP Support’s abuse response protocols.

---

**5. SOC Recommendations**

• Threat Hunting: Correlate with other high-risk IPs in the 49.124.151.0/24 subnet.
• DNS Security: Ensure DNSSEC validation and check for CAA record mismatches.
• Provider Engagement: Contact DiGi IP Support to confirm abuse mitigation steps.

Note: No direct indicators of active exploitation, but the subnet’s high abuse density warrants proactive containment.

---

Source: IPDebrief Threat Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.