49.42.158.199📋 Copy

# IP Intelligence Briefing: 49.42.158.199/32

## Executive Summary

Analysis of IP 49.42.158.199 indicates a Low Risk profile (risk score: 25). The address shows minimal threat indicators, no known malicious campaigns, and is classified as "Firewalled / No Services." The IP lacks open services, TLS certificates, and active ports.

## Risk Profile

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Operator Score: 0.1304 (Minimal)
• Reputation Status: Low Risk
• Network Classification: Firewalled / No Services

## Geolocation Intelligence

Conflicting geolocation signals detected:

• Primary Profile Data: United States, Massachusetts, Boston
• Historical RIR Data: APNIC (Asia-Pacific), Reliance Jio India infrastructure (49.32.0.0/12)
• Historical Location: Ghansoli NaviMumbai, India
• Abuse Contact: ip.abuse@ril.com

## Control Plane Assessment

• Origin ASN: 55836
• BGP Prefix: 49.40.0.0/14
• Route Stability: Unstable (isRouteStable: false)
• DNSBL Status: Listed on 1 of 8 DNSBL lists
• RPKI/IRR: Status not validated
• GeoValidation: GeoPlausible flag not set

## Threat Intelligence

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Campaign Correlation: 0
• Threat Persistence: 0 days
• Persistence Assessment: Not persistently malicious

## Network Behavior

• Open Ports: None detected
• Services: None identified
• TLS Certificates: None
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0

## Neighborhood Analysis (49.42.158.0/24)

• Subnet Abuse Density: 0
• Total Siblings: 1 (49.42.158.98)
• Neighbor Risk Score: 25
• Threat Siblings: 0
• Classification: Low risk subnet

## Observation History

11 signal observations recorded through July 2026. Recent signals indicate:

• RIR registration: APNIC (Reliance Jio India)
• Abuse reporting channel: ip.abuse@ril.com
• Confidence levels: 0.30-0.95 across signals

## Relationships

No related entities, hostnames, organizations, or certificates identified in the relationship graph.

## Recommended Actions

No specific firewall rules or security actions generated based on current risk profile. The IP demonstrates benign characteristics with no actionable threat indicators. Standard monitoring recommended; no blocking required at this time.

## Intelligence Assessment

The IP address 49.42.158.199 presents low threat risk. Conflicting geolocation data (US vs India) suggests potential route changes or misattribution. Absence of open services, zero incidents, and no threat correlations support a low-risk classification. Continued monitoring advised due to route instability and DNSBL listing.

---

*Analysis generated using IPDebrief intelligence platform data.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.