41.66.96.25
# INTELLIGENCE BRIEFING: 41.66.96.25/32
Classification: Low Risk | Last Updated: 2026-07-26
## Executive Summary
IP 41.66.96.25 is a low-risk address registered to Franz Pichler under ASN 51265. The address is classified as a residential/mobile endpoint with no active services. While currently clean, neighborhood analysis indicates one threat sibling within the /24 subnet.
## Ownership & Registration
- Organization: Franz Pichler
- ASN: AS51265 (mass response service gmbh)
- CIDR Block: 41.66.96.0/19
- RIR: AFRINIC
- Geolocation: Vienna, Austria (AT)
- PTR Hostname: mobiledyn-41-66-96-25.mrsn.at
## Risk Assessment
| Metric | Value |
|---|---|
| Risk Score | 0 |
| Provider Score | 0 |
| Authority Score | 0 |
| Stability Score | 0 |
| Blacklist Count | 0 |
| Abuse Confidence | N/A |
## Network Classification
- Type: Residential/Endpoint
- Services: None (Firewalled)
- Open Ports: None detected
- TLS/HTTP: No services
- Is Cloud/CDN/VPN/Proxy: No
## Threat Indicators
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Threat Persistence: 0 days
- Known Campaigns: None
## Control Plane Analysis
- Origin ASN: 51265
- BGP Prefix: 41.66.64.0/18
- Route Stability: Unstable
- DNSSEC Valid: Yes
- Operator Score: 0.1304 (Minimal)
- DNSBL Lists: 0 current listings
## Neighborhood Context (41.66.96.0/24)
- Abuse Density: 1
- Classification: Mostly Clean
- Inherited Risk: 2
- Threat Siblings: 1 active threat in subnet
- Total Siblings: 1
## Observation History
- Total Observations: 18
- Recent Activity: Single threat observation recorded
- Geolocation Discrepancy: Observed in South Africa (ZA) per Alienvault OTX, registered in Austria (AT)
- Temporal Trend: No persistent malicious behavior detected
## Related Entities
- Network: 41.66.96.0 - 41.66.127.255
- DNS Host: mobiledyn-41-66-96-25.mrsn.at
## Recommended Actions
No immediate firewall rules recommended. The IP presents low risk with no active services. Monitor subnet 41.66.96.0/24 due to one threat sibling. No action required for this specific address.
---
Analyst Notes: The hostname pattern (mobiledyn-*) and lack of open services indicate this is a residential/mobile device. The geolocation discrepancy between registration (AT) and observation data (ZA) warrants monitoring but does not indicate malicious activity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Franz Pichler |
| ASN | AS51265 |
| Network Name | 41.66.96.0 - 41.66.127.255 |
| CIDR Block | 41.66.96.0/19 |
| RIR | AFRINIC |
| Country | AT |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | mobiledyn-41-66-96-25.mrsn.at |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | mobiledyn-41-66-96-25.mrsn.at |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS51265 |
| Network Prefix | 41.66.64.0/18 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 6 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 12% | 2 | 2 |
| reputation | 20% | 1 | 4 |
| geolocation | 20% | 2 | 2 |
| Overall | 17% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 02:18:58 UTC |
| Last Seen | 2026-09-02 12:21:21 UTC |
| Profile Built | 2026-09-02 12:29:23 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 29 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 41.66.96.25
Who owns the IP address 41.66.96.25?
41.66.96.25 is registered to Franz Pichler. The address falls within the 41.66.96.0/19 network block. Registration is held at AFRINIC.
Where is 41.66.96.25 located?
Geolocation data places 41.66.96.25 in Vienna, State of Vienna, Austria. The local time zone is Europe/Vienna. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 41.66.96.25 malicious or safe?
41.66.96.25 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 41.66.96.25?
The reverse DNS (PTR) record for 41.66.96.25 is mobiledyn-41-66-96-25.mrsn.at. This hostname is not forward-confirmed, so it should be treated as a weak signal.