202.79.191.158
## IP Intelligence Briefing: 202.79.191.158
Executive Summary
IP 202.79.191.158 is classified as low risk with a risk score of 0. The address belongs to Turontelecom Uzbekistan's infrastructure and shows no evidence of malicious activity, blacklisting, or threat associations. No defensive firewall actions are recommended at this time.
---
Profile Overview
| Attribute | Value |
|---|---|
| Risk Score | 0 |
| Provider Score | 0 |
| Authority Score | 0 |
| Reputation | Low Risk |
| Classification | Firewalled / No Services |
| Status | Active |
Ownership & Infrastructure
- ASN: 59668 (APNIC RIR)
- Organization: mnt-uz-turonmedia-1
- Network: UZ-TURONMEDIA-20030721
- CIDR Block: 202.79.184.0/21
- PTR Record: 202.79.191.158.ip-trans.turontelecom.uz
- DNS Resolution: Confirmed (turontelecom.uz)
Geolocation Analysis
Multiple geolocation sources report conflicting data:
- Primary: Netherlands (NL), Amsterdam
- Secondary: Uzbekistan (UZ), Tashkent
- Threat Feed: Singapore (SG)
- Resolution: Forward DNS confirmed to turontelecom.uz domain
Threat Intelligence Indicators
- Blacklist Status: Clean (0 listings)
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Abuse Confidence: Not applicable (no abuse detected)
- Threat Feeds: None matched
- Campaign Associations: None
Network Services
- Open Ports: None detected
- TLS Certificate: Not applicable (firewalled)
- HTTP Services: None detected
- Purpose: Firewalled / No Services
Neighborhood Analysis (202.79.191.0/24)
- Total Siblings: 6
- Abuse Density: 0 (clean subnet)
- Threat Siblings: 0
- Risk Distribution: 5 low-risk, 1 medium-risk (202.79.191.227, score: 25)
- Assessment: Subnet shows minimal abuse activity
Historical Observations
- Total Observations: 17
- Threat Persistence: None
- Ownership Changes: 0
- Recent Signals: Organization, ASN, and geolocation data consistent with network registration
- Threat Persistence Days: 0
Relationship Graph
- Network: UZ-TURONMEDIA-20030721
- DNS Hostnames: 202.79.191.158.ip-trans.turontelecom.uz (multiple associations)
- Certificates: None
- Related Campaigns: None
Recommended Actions
No immediate defensive actions are required. The IP presents no threat indicators:
- Firewall: Allow (no blocking recommended)
- Monitoring: Standard logging only
- Investigation Priority: Low
---
Assessment: IP 202.79.191.158 is part of Turontelecom's infrastructure, currently operating with no active threat indicators. The subnet demonstrates clean behavior with minimal abuse density. SOC analysts may monitor for any changes in threat posture but no immediate containment or investigation is warranted.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | mnt-uz-turonmedia-1 |
| ASN | AS59668 |
| Network Name | UZ-TURONMEDIA-20030721 |
| CIDR Block | 202.79.184.0/21 |
| RIR | APNIC |
| Country | UZ |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 202.79.191.158.ip-trans.turontelecom.uz |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 202.79.191.158.ip-trans.turontelecom.uz |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS59668 |
| Network Prefix | 202.79.184.0/21 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 8% | 2 | 2 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 13:03:12 UTC |
| Last Seen | 2026-08-27 02:31:25 UTC |
| Profile Built | 2026-08-29 06:27:25 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 202.79.191.158
Who owns the IP address 202.79.191.158?
202.79.191.158 is registered to mnt-uz-turonmedia-1. The address falls within the 202.79.184.0/21 network block. Registration is held at APNIC.
Where is 202.79.191.158 located?
Geolocation data places 202.79.191.158 in Amsterdam, Tashkent, Netherlands. The local time zone is Europe/Amsterdam. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 202.79.191.158 malicious or safe?
202.79.191.158 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 202.79.191.158?
The reverse DNS (PTR) record for 202.79.191.158 is 202.79.191.158.ip-trans.turontelecom.uz. This hostname is not forward-confirmed, so it should be treated as a weak signal.