41.174.94.104📋 Copy

IP INTELLIGENCE BRIEFING: 41.174.94.104/32

SUMMARY

Target IP 41.174.94.104 presents as a low-risk address with no active threat indicators. The IP is associated with ORG-LTOL1-AFRINIC (Rob Davelaar), registered under AFRINIC, and operates within BGP prefix 41.174.64.0/19 (ASN 37332). The subnet (41.174.94.0/24) exhibits clean classification with zero abuse density.

RISK ASSESSMENT

• Risk Score: 25/100 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence: Not applicable (no active abuse signals)
• Blacklist Status: 0 listings across major threat feeds

TECHNICAL PROFILE

• Network Role: Firewalled / No Services Detected
• Open Ports: None
• DNS Status: No PTR hostnames; forward resolution inactive
• Geolocation: Country code CO; city field shows Kenya (data inconsistency flagged)
• BGP Routing: AS path 37100 → 30844 → 37332; RPKI state: not-found
• Route Stability: Not stable (2 route changes in 30 days)
• Control Plane: Operator score 0.1304 (Minimal); delegation age 5,547 days

THREAT INDICATORS

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Proxy/VPN: No
• Cloud/CDN/Hosting: No
• Campaign Association: None identified
• Certificate Matches: 0
• Correlated IPs: 0

OBSERVATION HISTORY

Eighteen signal observations recorded. Recent activity (2026-07-30) shows:

• Low confidence (0.30-0.70) network classification signals
• No persistent malicious behavior detected
• Zero threat observation count
• Ownership stability: No changes recorded

NEIGHBORHOOD ANALYSIS

Subnet 41.174.94.0/24 contains 2 total sibling IPs:

• 41.174.94.104: Risk Score 25 (Target)
• 41.174.94.210: Risk Score 0 (Authority Score 50)
• Abuse Density: 0% (Clean)
• Threat Siblings: 0

RELATIONSHIP GRAPH

All six relationship entries map to the same network entity (ORG-LTOL1-AFRINIC), indicating no external entity associations.

RECOMMENDED ACTIONS

No specific firewall or blocking rules recommended due to low-risk profile. The IP does not match known threat criteria for immediate defensive action.

INTELGENCE JUDGMENT

This IP address represents minimal threat to defensive operations. No evidence of malicious activity, command-and-control infrastructure, or abuse campaigns. The geographic inconsistency (CO country code with Kenya city designation) warrants monitoring but does not indicate compromise. Subnet cleanliness and lack of neighbor threats support benign classification.

SOC RECOMMENDATION: No action required. Continue passive monitoring; no blocking or alerting thresholds exceeded.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.