49.124.153.14📋 Copy

IP Intelligence Briefing: 49.124.153.14

*Generated for SOC Analysts*

---

**1. Risk Profile**

• Risk Score: 80 (High Risk)
• Provider: DiGi IP Support (AS4818)
• Geolocation: London, UK (GB)
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services detected)
• Threat Indicators: No malicious indicators, spam, or known attacker associations.

---

**2. Network & Ownership**

• ASN: 4818 (DiGi IP Support)
• CIDR Block: 49.124.0.0/15
• Subnet Abuse Density: 68.2% (moderate risk in the /24 subnet)
• Neighbors:

- 30 IPs with high risk (70–80 score), 9 with medium risk (15–55), and 5 with low risk (0–15).

- Notable high-risk neighbors: 49.124.153.12, 49.124.153.15, 49.124.153.17, 49.124.153.21, 49.124.153.24, etc.

• DNS: No PTR records or domain associations.

---

**3. Historical Observations**

• Stability: 0 route changes in 30 days; no persistent malicious activity.
• Geolocation Consistency: Mixed results (some observations linked to Malaysia, others to London).
• Behavioral Flags: No honeypot hits, enumeration attempts, or WAF violations.

---

**4. Threat & Abuse**

• DNSBL Listings: 5/8 DNSBL lists flagged the IP (moderate abuse risk).
• Control Plane:

- BGP prefix: 49.124.0.0/15

- Route stability: Unstable (0 route changes in 30 days).

- DNSSEC: Valid.

---

**5. Recommendations**

• Monitor Neighbors: Focus on high-risk IPs in 49.124.153.0/24 (e.g., 49.124.153.12, 49.124.153.21).
• Network Segmentation: Isolate this IP from critical assets due to high risk score.
• DNS & BGP: Verify DNSSEC and BGP configurations for potential spoofing risks.
• Investigate Subnet: The 49.124.0.0/15 subnet has mixed risk levels; audit for compromised hosts.

---

Note: No direct malicious activity detected, but the IP’s high risk score and high-risk neighbors warrant further investigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.