41.113.54.129📋 Copy

# IP Intelligence Briefing: 41.113.54.129/32

## Executive Summary

The IP address 41.113.54.129/32 presents a low-risk profile with no active threat indicators detected. The address belongs to MTN Business IP Maintainer (ASN 12091), operating within the 41.113.0.0/17 block registered with AfriNIC. Geolocation data places the IP in Johannesburg, South Africa. No services are currently running on this host, and no open ports were detected during scanning.

## Risk Assessment

• Overall Risk Score: 0 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Abuse Confidence Score: Not applicable (no abuse signals)
• Blacklist Count: 0
• Campaign Likelihood: Not detected

## Technical Profile

## Threat Intelligence

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None detected
• Threat Feeds: Empty
• Threat Persistence: 0 days observed
• Malicious Persistence: No

## Network Behavior

• Open Ports: None detected
• TLS Certificate: Not configured
• HTTP Title: Not available
• Reverse DNS: No PTR records
• Forward Resolution: Not confirmed
• Hosted Domains: None
• Email Authentication: Not configured (no SPF/DMARC)

## Control Plane Analysis

• Operator Score: 0.1304 (Minimal)
• BGP Prefix: 41.113.0.0/17
• Route Stability: False (route changes detected in 30-day window)
• MoAS Status: Not applicable
• DNSSEC: Valid
• DNSBL Listed: 0 of 8 total lists

## Neighborhood Analysis (41.113.54.0/24)

• Abuse Density: 1
• Classification: Mostly Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 1
• Inherited Risk: 2

## Historical Observation Summary

17 observations recorded with the following key signals:

• Geolocation: Recent observation confirmed Johannesburg coordinates with 800km accuracy radius
• Ownership: No ownership changes detected
• Threat Signals: 1 threat observation recorded
• Neighborhood: Classification as "mostly_clean" with minimal inherited risk
• Operator Score: Consistent "Minimal" classification (0.1304)

## Recommended Actions

Based on the low-risk profile, no immediate blocking or filtering actions are recommended for this IP address. Standard monitoring practices apply. The absence of active threat indicators, open ports, and blacklist presence supports continued traffic allowance while maintaining observability.

---

*Generated for SOC analyst use. All data derived from IPDebrief platform intelligence feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.