41.193.50.201
IP Intelligence Briefing: 41.193.50.201
Date: 2026-06-13
---
**1. Risk Profile**
- Overall Risk: Low (Risk Score: 25)
- Threat Indicators: No malicious activity detected (no campaigns, spam, or abuse reports).
- Network Role: Firewalled / No Services (openPorts: empty, TLS/HTTP services: inactive).
- Geolocation Discrepancy:
- Reported Location: Miami, Florida, USA (geolocation data).
- Observed Conflict: One historical record indicates Cape Town, South Africa (latitude -33.914, longitude 18.4129).
- BGP Registration: Registered to Vox Telecom Ltd (South Africa, ASN 11845).
---
**2. Observed Behavior**
- DNSBL Listing:
- Listed in 1/8 DNSBLs (high-severity threat category).
- DNSSEC validation: Valid.
- Network Stability:
- BGP route stability: Unstable (routeChanges30d: 0, isRouteStable: false).
- No active neighbors or subnet abuse detected (neighbors: 0, abuseDensity: 0).
- Historical Signals:
- Mixed geolocation data (US vs. South Africa).
- No DNS or service activity (PTR, HTTP, TLS: empty).
---
**3. Relationships & Subnet**
- Neighbors: No sibling IPs in 41.193.50.0/24 subnet detected.
- Organizational Ties:
- Registered to Vox Telecom Ltd (South Africa).
- No linked domains, certificates, or hostnames.
---
**4. Recommendations**
1. Verify Geolocation Discrepancy: Investigate conflicting location data (US vs. South Africa). Potential spoofing or misattribution.
2. Monitor DNSBL Listing: Check the high-severity DNSBL entry for potential compromise or false positives.
3. Validate BGP Registration: Confirm Vox Telecom’s ownership and ensure route stability.
4. Network Isolation: Given lack of neighbors/services, consider it a low-activity host (possibly honeypot or isolated infrastructure).
---
Next Steps: Cross-reference with internal threat feeds, validate geolocation anomalies, and monitor for new activity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | William Keith Laaks |
| ASN | AS11845 |
| Network Name | ORG-DPBO1-AFRINIC |
| CIDR Block | 41.193.0.0/16 |
| RIR | AFRINIC |
| Country | ZA |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 0% | 0 | 0 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-05 19:23:55 UTC |
| Last Seen | 2026-06-13 07:44:39 UTC |
| Profile Built | 2026-06-13 08:15:59 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.