# 49.125.201.66 — IP Intelligence Summary

49.125.201.66 is an IPv4 address operated by DiGi IP Support (AS4818), geolocated to Seri Kembangan, Malaysia. As of October 28, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/49.125.201.66
- Last updated: 2026-10-28

## Ownership

- Organization: DiGi IP Support
- Network name: DIGI-AS-AP
- Allocated block: 49.124.0.0/15
- ASN: AS4818 (https://ipdebrief.com/asn/4818)
- Regional registry: APNIC

## Location

- City: Seri Kembangan
- Region: Selangor
- Country: Malaysia
- Time zone: Asia/Kuala_Lumpur

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (80/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 22/tcp — ssh

## Analyst narrative

\# IP Intelligence Briefing: 49.125.201.66/32

\## Executive Summary

Target IP 49.125.201.66 presents a **low-risk profile** with no active threat indicators. However, the IP resides within a subnet exhibiting elevated abuse activity, requiring contextual awareness during traffic analysis.

\## Risk Assessment

\- **Overall Risk Score:** 0 (Low Risk)

\- **Reputation Classification:** Low Risk

\- **Threat Indicators:** None detected

\- **Blacklist Status:** 0 listings (current assessment)

\- **Known Attacker:** False

\- **Spam Source:** False

\## Geolocation & Infrastructure

\- **Primary Location:** London, GB (Europe/London timezone)

\- **ISP/Provider:** DiGi IP Support (Malaysia)

\- **ASN:** 49.124.0.0/15 (DIGI-AS-AP)

\- **Network Role:** Firewalled / No Services

\- **Infrastructure Type:** Not cloud, CDN, proxy, VPN, or hosting

\## Technical Profile

\- **Open Ports:** None

\- **DNS Records:** No PTR hostnames, no forward resolution

\- **Email Authentication:** No SPF/DMARC records configured

\- **SSL/TLS:** No certificates detected

\- **Control Plane:** Route stability flagged as unstable

\## Historical Observations

Analysis of 11 observations reveals:

\- **Geolocation Discrepancy:** Profile indicates GB; historical data shows Malaysia (Seri Kembangan, Selangor) with 0.70 confidence

\- **ISP Attribution:** Historical data confirms DiGi IP Support ownership with 0.90 confidence

\- **Blacklist Activity:** One observation recorded 8 blacklist listings with 3 total listings, maximum severity "high"

\- **DNSSEC:** Validated as true in one observation

\## Neighborhood Context

The /24 subnet (49.125.201.0/24) shows elevated activity:

\- **Abuse Density:** 10.5%

\- **Total Neighbors:** 19

\- **Risk Distribution:** 2 high-risk, 15 medium-risk, 2 low-risk

\- **High-Risk Neighbors:** IPs 49.125.201.1, .2, .63, .65, .70, .72, .73, .79, .80, .83, .86, .89, .90, .92 (risk scores 70-80)

\- **Medium-Risk Neighbors:** IPs 49.125.201.75, .84, .85 (risk score 55)

\## Threat Intelligence Narrative

IP 49.125.201.66 is a passive endpoint with no active services, open ports, or known malicious behavior. The IP belongs to DiGi Communications' Malaysia infrastructure but is geographically resolved to London. Despite the low individual risk profile, the subnet exhibits moderate abuse density with 14 of 19 neighbors scoring 55+ risk. This contextual environment warrants monitoring for lateral movement or coordinated activity from neighboring IPs.

\## Recommended Actions

\- **Current Risk:** No immediate firewall blocking required

\- **Monitoring:** Track subnet activity; consider contextual blocking rules for high-risk neighbors

\- **Investigation Priority:** Medium (due to neighborhood context despite clean individual profile)

\## SOC Analyst Notes

\- No direct threat indicators for this specific IP

\- Monitor for changes in service state or blacklist status

\- Correlate with high-risk subnet neighbors for potential campaign activity

\- Historical blacklist data suggests potential past abuse; verify current status before allowing traffic

## Nearby addresses

- 49.125.201.1 (https://ipdebrief.com/49.125.201.1)
- 49.125.201.2 (https://ipdebrief.com/49.125.201.2)
- 49.125.201.63 (https://ipdebrief.com/49.125.201.63)
- 49.125.201.64 (https://ipdebrief.com/49.125.201.64)
- 49.125.201.65 (https://ipdebrief.com/49.125.201.65)
- 49.125.201.67 (https://ipdebrief.com/49.125.201.67)
- 49.125.201.68 (https://ipdebrief.com/49.125.201.68)
- 49.125.201.69 (https://ipdebrief.com/49.125.201.69)
- 49.125.201.70 (https://ipdebrief.com/49.125.201.70)
- 49.125.201.72 (https://ipdebrief.com/49.125.201.72)
- 49.125.201.73 (https://ipdebrief.com/49.125.201.73)
- 49.125.201.75 (https://ipdebrief.com/49.125.201.75)

---

Source: IPDebrief, "49.125.201.66 IP intelligence", https://ipdebrief.com/49.125.201.66, updated 2026-10-28. Assessments are probabilistic.