# 49.124.151.62 — IP Intelligence Summary 49.124.151.62 is an IPv4 address operated by DiGi IP Support (AS4818), geolocated to 40000 Shah Alam, Malaysia. As of November 7, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/49.124.151.62 - Last updated: 2026-11-07 ## Ownership - Organization: DiGi IP Support - Network name: DIGI-AS-AP - Allocated block: 49.124.0.0/15 - ASN: AS4818 (https://ipdebrief.com/asn/4818) - Regional registry: APNIC ## Location - City: 40000 Shah Alam - Region: Selangor - Country: Malaysia - Time zone: Asia/Kuala_Lumpur ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: High Risk (80/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Exposed services - 22/tcp — ssh ## Analyst narrative \## IP INTELLIGENCE BRIEFING: 49.124.151.62/32 **Date:** 2026-07-23 **Classification:** Moderate Risk (55/100) **Product:** IPDebrief Threat Intelligence \--- \### EXECUTIVE SUMMARY IP address 49.124.151.62/32 presents moderate risk (score: 55/100) with elevated neighborhood abuse density. The IP belongs to DiGi IP Support (ASN 4818) under APNIC registry. No active services detected on the target host, but 3 DNSBL listings and 0.364 subnet abuse density warrant monitoring. \--- \### OWNERSHIP & GEOLOCATION | Field | Data | |-------|------| | ASN | 4818 | | Organization | DiGi IP Support | | Network | 49.124.0.0/15 | | RIR | APNIC | | Country | GB (consensus); MY observed in history | | City | London (consensus); Shah Alam, Selangor observed in history | | Abusive Contact | abuse@celcomdigi.com | **Note:** Geographic inconsistency detected between current profile (GB/London) and historical observations (MY/Selangor, Malaysia). This may indicate routing anomalies or multi-region infrastructure. \--- \### THREAT INDICATORS | Indicator | Status | |-----------|--------| | Risk Score | 55/100 (Moderate) | | DNSBL Listed | 3/8 lists | | Known Campaigns | None | | Tor Exit Node | No | | Known Attacker | No | | Spam Source | No | | Operator Score | 0.1304 (Minimal) | | Threat Persistence | 0 days | | Honeypot Hits | 0 | | WAF Violations | 0 | **Evidence:** IP appears on 3 blacklist feeds with maximum severity rating "high." \--- \### NEIGHBORHOOD ANALYSIS **Subnet:** 49.124.151.0/24 **Total Neighbors:** 55 **Abuse Density:** 0.364 (Elevated) **Risk Distribution:** \- High Risk: 20 IPs (36%) \- Medium Risk: 34 IPs (62%) \- Low Risk: 1 IP (2%) **High-Risk Neighbors (Sample):** | IP | Risk Score | Authority Score | |----|-----------|-----------------| | 49.124.151.2 | 70 | 50 | | 49.124.151.4 | 80 | 50 | | 49.124.151.5 | 70 | 50 | | 49.124.151.6 | 80 | 50 | | 49.124.151.7 | 70 | 50 | The /24 subnet exhibits significant abuse concentration, suggesting potential shared infrastructure usage or coordinated activity. \--- \### OBSERVATION HISTORY (12 Signals) \- **Most Recent:** 2026-07-23 13:25:02 UTC \- **Geolocation Signals:** Conflicting data between GB (London) and MY (Selangor) \- **ASN/Org Signals:** Consistent DiGi IP Support / DIGI-AS-AP \- **Threat Signals:** Listed on 8 DNSBL feeds with 3 active listings No persistent malicious activity detected over observation window. \--- \### NETWORK CLASSIFICATION \- Service Purpose: Firewalled / No Services \- Open Ports: None detected \- TLS Certificate: None \- Hosted Domains: 0 \- Cloud/CDN/VPN/Proxy: Negative on all \- Mobile Carrier: Not applicable \- Bogon: No \- Anycast: No \--- \### RELATIONSHIP GRAPH \- **Same Network:** DIGI-AS-AP (49.124.0.0/15) \- No hostname, organization, or certificate relationships detected beyond network-level association. \--- \### RECOMMENDED ACTIONS **Immediate:** \`\`\`bash \# iptables iptables -A INPUT -s 49.124.151.62 -j DROP \# nftables nft add rule inet filter input ip saddr 49.124.151.62 drop \# nginx deny 49.124.151.62; \`\`\` **WAF Integration:** \`\`\`json { "Cloudflare WAF": { "action": "block", "expression": "ip.src eq 49.124.151.62" }, "AWS WAF": { "addresses": \["49.124.151.62/32"\], "description": "IPDebrief risk 55" } } \`\`\` **Operational Recommendations:** 1. Increase logging verbosity for traffic from this subnet (49.124.151.0/24) 2. Review historical activity within the /24 neighborhood 3. Monitor for geolocation inconsistencies in future observations 4. Consider blocking entire /24 subnet if abuse patterns justify \--- \### INTELLIGENCE JUDGMENT This IP represents moderate risk with elevated neighborhood context. The subnet's 0.364 abuse density indicates significant malicious activity nearby. While no direct threat indicators were observed on 49.124.151.62 itself, the infrastructure's association with a high-abuse density subnet warrants defensive blocking and enhanced monitoring. Geographic inconsistencies suggest potential routing complexity that may require further investigation if this IP becomes actively targeted. **Priority:** Monitor → Block if activity confirmed **Confidence:** Medium ## Nearby addresses - 49.124.151.2 (https://ipdebrief.com/49.124.151.2) - 49.124.151.4 (https://ipdebrief.com/49.124.151.4) - 49.124.151.5 (https://ipdebrief.com/49.124.151.5) - 49.124.151.6 (https://ipdebrief.com/49.124.151.6) - 49.124.151.7 (https://ipdebrief.com/49.124.151.7) - 49.124.151.8 (https://ipdebrief.com/49.124.151.8) - 49.124.151.9 (https://ipdebrief.com/49.124.151.9) - 49.124.151.10 (https://ipdebrief.com/49.124.151.10) - 49.124.151.11 (https://ipdebrief.com/49.124.151.11) - 49.124.151.12 (https://ipdebrief.com/49.124.151.12) - 49.124.151.13 (https://ipdebrief.com/49.124.151.13) - 49.124.151.14 (https://ipdebrief.com/49.124.151.14) --- Source: IPDebrief, "49.124.151.62 IP intelligence", https://ipdebrief.com/49.124.151.62, updated 2026-11-07. Assessments are probabilistic.