41.215.146.195📋 Copy

IP Intelligence Briefing: 41.215.146.195

*Generated via IPDebrief analysis*

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Ownership:

- ASN: 19711

- Organization: Musa Tsela

- Netblock: 41.215.144.0/22 (Swaziland, SZ)

• Geolocation:

- Country: Swaziland (SZ)

- City: Mbabane

- Coordinates: -26.32° latitude, 31.13° longitude

• Network Role:

- Web Server (HTTP/HTTPS, SSH)

- TLS Certificate: Issued to *sage.gsh.org.sz* (Sectigo CA)

- Server Banner: Microsoft-IIS/10.0

---

**2. Threat Indicators**

• No direct malicious indicators (no malware, spam, or known attacker associations).
• DNSSEC Valid: Resolves with DNSSEC validation.
• BGP Prefix: 41.215.144.0/20 (owned by Musa Tsela, Swaziland).

---

**3. Observation History (Last 30 Days)**

• Geo Validation: Plausible (435–445ms RTT, ~9,077km distance from probe).
• Network Stability:

- 0 route changes in 30 days.

- Subnet abuse density: 1 (low risk).

• Services:

- Open ports: 80 (HTTP), 443 (HTTPS), 22 (SSH), 8443 (HTTPS-alt).

- IIS server with ASP.NET, no HSTS or CSP headers.

---

**4. Relationships & Neighbors**

• Network Relationships:

- Linked to 41.215.144.0/22 (same subnet).

- No direct connections to known malicious entities.

• Neighboring IPs:

- Subnet 41.215.146.195/24 shows 0 abuse density.

- No active or threat siblings reported.

---

**5. Recommendations**

• Monitor Traffic: Track unusual activity on ports 80/443 due to high exposure.
• Verify Certificate: Confirm validity of *sage.gsh.org.sz* TLS certificate.
• Check Subnet: Investigate 41.215.144.0/22 for potential collateral risks.
• Firewall Rules: Consider blocking non-essential ports (e.g., 8443) unless required.

---

Note: While the IP has a high risk score, no direct malicious activity is observed. Further analysis of the subnet and network behavior is advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.