41.116.198.87
# IPDEBRIEF THREAT INTELLIGENCE BRIEFING
Target: 41.116.198.87/32
Classification: LOW RISK
Report Date: 2026-07-24
---
## EXECUTIVE SUMMARY
IP address 41.116.198.87 is classified as LOW RISK with a risk score of 0. The IP is assigned to MTN Business IP Maintainer (ASN 12091) within the 41.116.128.0/17 block in Cape Town, South Africa. No malicious indicators, blacklist hits, or threat activity were observed during analysis.
---
## OWNERSHIP & GEOLOCATION
| Field | Value |
|---|---|
| **Organization** | MTN Business IP Maintainer |
| **ASN** | 12091 |
| **CIDR Block** | 41.116.128.0/17 |
| **Country** | South Africa (ZA) |
| **Region** | Western Cape |
| **City** | Cape Town |
| **RIR** | AFRINIC |
| **Geolocation Confidence** | Consensus: TRUE |
---
## THREAT ASSESSMENT
Risk Score: 0/10
Abuse Confidence: N/A
Blacklist Status: Not listed (0 lists)
Known Campaigns: None
Threat Indicators:
- Not a Tor exit node
- Not a known attacker
- Not a spam source
- Not a proxy service
- No active threat feeds matched
---
## NETWORK CLASSIFICATION
| Category | Status |
|---|---|
| **Service Purpose** | Firewalled / No Services |
| **Cloud Infrastructure** | No |
| **CDN** | No |
| **VPN/Proxy** | No |
| **Hosting Provider** | No |
| **Mobile Network** | No |
| **Residential** | No |
| **Anycast** | No |
DNS Analysis:
- PTR Records: None
- Forward Resolution: Not resolved
- Hosted Domains: 0
- SPF/DMARC: Not configured
---
## NEIGHBORHOOD ANALYSIS
Subnet: 41.116.198.87/24
Abuse Density: 0.0
Classification: Clean
Total Siblings: 1
Active/Threat Siblings: 0/0
The /24 subnet contains no additional active or threat-classified neighbors, indicating isolated operational characteristics.
---
## OBSERVATION HISTORY
Total Observations: 14
Most Recent: 2026-07-24
Temporal Signals:
- Subnet classification: Consistently "clean"
- Ownership changes: 0 (stable)
- Threat persistence days: 0
- Threat observation count: 0
- Is persistently malicious: FALSE
No significant changes detected in IP signals over the observation period.
---
## RELATIONSHIP MAPPING
The IP shows relationships only within the same network block (41.116.128.0 - 41.116.255.255). No external relationships detected to:
- Related organizations
- Associated hostnames
- SSL certificates
- Correlated IPs
---
## CONTROL PLANE
| Parameter | Value |
|---|---|
| **BGP Prefix** | 41.116.128.0/17 |
| **Origin ASN** | 12091 |
| **Route Stability** | FALSE |
| **MOAS** | No |
| **Operator Score** | 0.1304 (Minimal) |
| **DNSSEC** | Valid |
| **DNSBL Lists** | 0/8 |
---
## RECOMMENDED ACTIONS
Security Actions: None required
Firewall Rules: No blocking recommended
Risk Score: 0
The IP address presents no actionable threats. Standard monitoring practices are sufficient.
---
## ANALYST NOTES
This IP address belongs to a business ISP infrastructure block operated by MTN Business. The network shows no signs of abuse or malicious activity. The IP is currently firewalled with no active services detected. No correlation to known threat actors or campaigns.
Confidence Level: HIGH
Recommended Handling: Allow through with standard logging
---
*Generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | MTN Business IP Maintainer |
| ASN | AS12091 |
| Network Name | 41.116.128.0 - 41.116.255.255 |
| CIDR Block | 41.116.128.0/17 |
| RIR | AFRINIC |
| Country | ZA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS12091 |
| Network Prefix | 41.116.128.0/17 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 13:03:29 UTC |
| Last Seen | 2026-08-27 06:21:16 UTC |
| Profile Built | 2026-08-29 05:34:01 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 41.116.198.87
Who owns the IP address 41.116.198.87?
41.116.198.87 is registered to MTN Business IP Maintainer. The address falls within the 41.116.128.0/17 network block. Registration is held at AFRINIC.
Where is 41.116.198.87 located?
Geolocation data places 41.116.198.87 in Cape Town, Western Cape, South Africa. The local time zone is Africa/Johannesburg. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 41.116.198.87 malicious or safe?
41.116.198.87 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.