49.213.32.39
# IP Intelligence Briefing: 49.213.32.39/32
## Executive Summary
IP address 49.213.32.39 is classified as Moderate Risk (risk score: 40). The address belongs to MS UMARA INTERNATIONAL administrator (ASN: 147180) under the MUI-BD network block (49.213.32.0/23). While the IP shows no active services or open ports, it appears on 2 of 8 DNS blacklists with high-severity listings. Geographic validation indicates conflicting data between UK and Bangladesh, requiring further investigation.
## Technical Profile
- Risk Score: 40 (Moderate)
- ASN: 147180 (APNIC RIR)
- Organization: MS UMARA INTERNATIONAL administrator
- Network: MUI-BD, 49.213.32.0/23
- Geolocation: London, GB (profile) vs. Bangladesh coordinates in history
- Network Role: Firewalled / No Services
- DNSBL Status: Listed on 2 of 8 blacklists
- Route Stability: Unstable (isRouteStable: false)
- Geo Validation: geoPlausible: false (data inconsistency)
## Threat Indicators
- DNSBL Listings: 2 confirmed listings with high-severity classifications
- Pulse Activity: 1 pulse detected with nested threat indicators
- Behavioral Signals: No honeypot hits, enumeration strikes, or WAF violations observed
- Campaign Correlation: No known campaigns matched
- Threat Feeds: Empty threat feed data
## Observation History
Fourteen observations recorded, with recent activity on 2026-07-25. Key observations include:
- Geolocation signals showing both GB and BD (Bangladesh) coordinates
- Threat indicators present in Alienvault OTX data (pulse_count: 1)
- Blacklist listings with high-severity designations
- Ownership stability: No ownership changes detected
## Network Neighborhood
- Subnet: 49.213.32.39/24
- Abuse Density: 0 (no neighboring IPs flagged)
- Neighbor Count: 0 active siblings
- Risk Distribution: No high/medium/low risk neighbors identified
## Relationships
- Same Network: MUI-BD network (2 relationships identified)
- No external entity relationships detected
## Recommended Actions
Based on the risk profile (40), the following firewall rules are recommended:
| Platform | Rule |
|---|---|
| iptables | `iptables -A INPUT -s 49.213.32.39 -j DROP` |
| nftables | `nft add rule inet filter input ip saddr 49.213.32.39 drop` |
| nginx | `deny 49.213.32.39;` |
| pfSense | `49.213.32.39/32` |
| Cloudflare WAF | Block with filter expression: `ip.src eq 49.213.32.39` |
| AWS WAF | Block address: `49.213.32.39/32` |
## Assessment
The IP exhibits moderate-risk characteristics primarily driven by DNSBL listings and geographic data inconsistencies. The address appears to be firewalled with no active services exposed. The geographic discrepancy between UK and Bangladesh data suggests potential misattribution or multi-use infrastructure. SOC teams should monitor for any service activation and cross-reference with threat intelligence feeds for updated context.
---
*Report generated: IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | MS UMARA INTERNATIONAL administrator |
| ASN | AS147180 |
| Network Name | MUI-BD |
| CIDR Block | 49.213.32.0/23 |
| RIR | APNIC |
| Country | BD |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS147180 |
| Network Prefix | 49.213.32.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-09 13:32:45 UTC |
| Last Seen | 2026-08-29 04:39:12 UTC |
| Profile Built | 2026-08-29 04:39:21 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 49.213.32.39
Who owns the IP address 49.213.32.39?
49.213.32.39 is registered to MS UMARA INTERNATIONAL administrator. The address falls within the 49.213.32.0/23 network block. Registration is held at APNIC.
Where is 49.213.32.39 located?
Geolocation data places 49.213.32.39 in London, ENG, United Kingdom. The local time zone is Europe/London. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 49.213.32.39 malicious or safe?
49.213.32.39 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.