41.79.191.202
IP INTELLIGENCE BRIEFING
Target IP: 41.79.191.202/32
Classification: Low Risk / Defensive Profile
Date: 2026-07-30
---
EXECUTIVE SUMMARY
IP address 41.79.191.202 presents as a low-risk network endpoint with minimal threat indicators. The IP is associated with a small /29 block under Loward Anderson (ASN 37184) and shows no active malicious activity, open services, or reputation issues.
---
OWNERSHIP & REGISTRATION
- ASN: 37184 (Loward Anderson)
- Network Block: 41.79.191.200 - 41.79.191.207 (/29)
- RIR: AFRINIC
- Registration Date: 2010-03-09 (5,987 days)
- Geolocation Discrepancy: ASN country code (ZW/Zimbabwe) conflicts with geolocation database listing (US). Requires further validation.
---
THREAT ASSESSMENT
| Metric | Value | Status |
|---|---|---|
| **Overall Risk Score** | 5/100 | Low |
| **Abuse Confidence** | Not detected | Clean |
| **Blacklist Count** | 0 | Clean |
| **Known Campaigns** | None | Clean |
| **Tor Exit Node** | No | Clean |
| **Proxy/VPN Service** | No | Clean |
Threat Indicators: None detected across all monitored threat feeds.
---
NETWORK SERVICES & EXPOSURE
- Open Ports: None detected (firewalled)
- TLS Certificates: None
- HTTP Services: Inactive
- DNS Records: No forward resolution, no PTR records
- Email Authentication: No SPF/DMARC records
- Service Purpose: Firewalled / No Services
---
CONTROL PLANE ANALYSIS
- BGP Prefix: 41.79.191.0/24
- AS Path: 2914 → 33763 → 37184
- RPKI State: Not Found
- Route Stability: Unstable (1 route change in 30 days)
- DNSSEC: Valid
- DNSBL Listings: 0/8 lists
---
NEIGHBORHOOD ANALYSIS
- Subnet: 41.79.191.202/24
- Abuse Density: 0 (Clean)
- Total Siblings: 1
- Active Threat Siblings: 0
- Classification: Clean
The /24 subnet demonstrates no correlated abuse activity.
---
OBSERVATION HISTORY
Total Signals: 17 observations collected (2026-07-30)
Key observations include:
- Network ownership signals (confidence: 85%)
- BGP prefix validation with no ROA coverage (confidence: 50%)
- Port scanning activity detected but no services responding (confidence: 70%)
- Ownership and threat persistence signals indicating stable, non-malicious behavior
No persistent malicious activity detected over observation period.
---
NETWORK RELATIONSHIPS
- Same Network: 41.79.191.200 - 41.79.191.207 (5 relationship records)
- Related Hostnames: None
- Associated Certificates: None
- Linked Organizations: None
---
RECOMMENDED ACTIONS
Based on current risk profile:
- No immediate firewall rules required
- No blocking recommended
- Continue monitoring due to geolocation discrepancy
- No WAF or Cloudflare rules needed
---
INTELLIGENCE NOTES
The IP address demonstrates benign network behavior with no active threat indicators. The primary anomaly is the geolocation mismatch (ASN country code ZW vs geolocation database US), which warrants periodic revalidation but does not indicate active compromise. The firewalled state and lack of open services suggest legitimate infrastructure use.
Clearance: No immediate threat action required.
---
*Generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Loward Anderson |
| ASN | AS37184 |
| Network Name | 41.79.191.200 - 41.79.191.207 |
| CIDR Block | 41.79.191.200/29 |
| RIR | AFRINIC |
| Country | ZW |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 1 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-25 08:45:32 UTC |
| Last Seen | 2026-07-30 03:29:37 UTC |
| Profile Built | 2026-07-30 03:40:19 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 20 |
Full dossier details are available via our API.