49.125.201.66
49.125.201.66 is an IPv4 address operated by DiGi IP Support (AS4818), geolocated to Seri Kembangan, Malaysia. As of October 28, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected.
# IP Intelligence Briefing: 49.125.201.66/32
## Executive Summary
Target IP 49.125.201.66 presents a low-risk profile with no active threat indicators. However, the IP resides within a subnet exhibiting elevated abuse activity, requiring contextual awareness during traffic analysis.
## Risk Assessment
- Overall Risk Score: 0 (Low Risk)
- Reputation Classification: Low Risk
- Threat Indicators: None detected
- Blacklist Status: 0 listings (current assessment)
- Known Attacker: False
- Spam Source: False
## Geolocation & Infrastructure
- Primary Location: London, GB (Europe/London timezone)
- ISP/Provider: DiGi IP Support (Malaysia)
- ASN: 49.124.0.0/15 (DIGI-AS-AP)
- Network Role: Firewalled / No Services
- Infrastructure Type: Not cloud, CDN, proxy, VPN, or hosting
## Technical Profile
- Open Ports: None
- DNS Records: No PTR hostnames, no forward resolution
- Email Authentication: No SPF/DMARC records configured
- SSL/TLS: No certificates detected
- Control Plane: Route stability flagged as unstable
## Historical Observations
Analysis of 11 observations reveals:
- Geolocation Discrepancy: Profile indicates GB; historical data shows Malaysia (Seri Kembangan, Selangor) with 0.70 confidence
- ISP Attribution: Historical data confirms DiGi IP Support ownership with 0.90 confidence
- Blacklist Activity: One observation recorded 8 blacklist listings with 3 total listings, maximum severity "high"
- DNSSEC: Validated as true in one observation
## Neighborhood Context
The /24 subnet (49.125.201.0/24) shows elevated activity:
- Abuse Density: 10.5%
- Total Neighbors: 19
- Risk Distribution: 2 high-risk, 15 medium-risk, 2 low-risk
- High-Risk Neighbors: IPs 49.125.201.1, .2, .63, .65, .70, .72, .73, .79, .80, .83, .86, .89, .90, .92 (risk scores 70-80)
- Medium-Risk Neighbors: IPs 49.125.201.75, .84, .85 (risk score 55)
## Threat Intelligence Narrative
IP 49.125.201.66 is a passive endpoint with no active services, open ports, or known malicious behavior. The IP belongs to DiGi Communications' Malaysia infrastructure but is geographically resolved to London. Despite the low individual risk profile, the subnet exhibits moderate abuse density with 14 of 19 neighbors scoring 55+ risk. This contextual environment warrants monitoring for lateral movement or coordinated activity from neighboring IPs.
## Recommended Actions
- Current Risk: No immediate firewall blocking required
- Monitoring: Track subnet activity; consider contextual blocking rules for high-risk neighbors
- Investigation Priority: Medium (due to neighborhood context despite clean individual profile)
## SOC Analyst Notes
- No direct threat indicators for this specific IP
- Monitor for changes in service state or blacklist status
- Correlate with high-risk subnet neighbors for potential campaign activity
- Historical blacklist data suggests potential past abuse; verify current status before allowing traffic
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DiGi IP Support |
| ASN | AS4818 |
| Network Name | DIGI-AS-AP |
| CIDR Block | 49.124.0.0/15 |
| RIR | APNIC |
| Country | MY |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS4818 |
| Network Prefix | 49.124.0.0/15 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 8% | 2 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 17:24:34 UTC |
| Last Seen | 2026-10-29 08:14:31 UTC |
| Profile Built | 2026-10-28 01:42:17 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 49.125.201.66
Who owns the IP address 49.125.201.66?
49.125.201.66 is registered to DiGi IP Support. The address falls within the 49.124.0.0/15 network block. Registration is held at APNIC.
Where is 49.125.201.66 located?
Geolocation data places 49.125.201.66 in Seri Kembangan, Selangor, Malaysia. The local time zone is Asia/Kuala_Lumpur. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 49.125.201.66 malicious or safe?
49.125.201.66 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 49.125.201.66?
Responsive ports observed on 49.125.201.66 include 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.