41.73.98.114📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 41.73.98.114/32

Date: 2026-07-24

Classification: Moderate Risk

## Executive Summary

The target IP 41.73.98.114 presents a moderate risk profile (Score: 40/100) with limited active threat indicators. The address operates with no open services and is firewalled. Historical data reveals significant geolocation inconsistencies between US-based routing and African network registration data. The IP is listed on 2 of 8 DNSBLs and is associated with ASN 30985 (Mohamed Aboubacrine) under AFRINIC registration.

## Ownership and Network Classification

• ASN: 30985
• Organization: Mohamed Aboubacrine
• Network Block: 41.73.98.0/24
• RIR: AFRINIC
• Network Role: Infrastructure/No Services (Firewalled)
• Classification: Not a CDN, Cloud, VPN, Proxy, or Tor exit

## Geolocation Analysis

Geolocation data shows conflicting sources:

• Primary Routing Data: Boston, Massachusetts, US (Comcast/Cogent transit)
• Network Registration Data: Mali, ML (Timbuktu/Bamako)
• Consensus: Inconsistent across multiple sources (2 sources, geoConsensus: false)

The routing path indicates US transit networks, while registration records and some geolocation databases point to West Africa. This discrepancy warrants attention for potential routing manipulation or infrastructure misconfiguration.

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None identified
• Blacklist Status: Listed on 2 of 8 DNSBLs
• DNSBL Listed Count: 2/8
• Operator Score: 0.1304 (Minimal)
• Abuse Confidence: Not assessed

## Service and Network Activity

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• PTR Hostnames: None
• Forward Resolution: None confirmed
• Service Purpose: Firewalled / No Services

## Neighborhood Assessment

The /24 subnet (41.73.98.0/24) contains 3 active sibling IPs:

• 41.73.98.3: Risk Score 0, Authority Score 50 (Low risk)
• 41.73.98.25: Risk Score 40, Authority Score 50 (Medium risk)
• 41.73.98.114 (Target): Risk Score 40, Authority Score 50 (Medium risk)

Abuse Density: 0/100 (Minimal)

High Risk Neighbors: 0

Medium Risk Neighbors: 1

## Historical Signal Analysis

11 observations recorded. Recent activity shows:

• 2026-07-24T15:04:18: ASN AS30985, Mali (ML), Timbuktu geolocation, threat indicators present
• 2026-07-24T15:02:54: AFRINIC registration, Mohamed Aboubacrine organization, Mali netname
• 2026-07-24T15:02:19: Minimal operator score assessment

Signals indicate stable ownership with no malicious activity escalation. Threat observation count: 0. Persistent malicious activity: False.

## Relationship Graph

Single relationship identified:

• Same Network: 41.73.98.0 - 41.73.98.255

No relationships to external organizations, hostnames, or certificates detected.

## Recommended Actions

Firewall Rule: No specific blocking recommended at this time.

Monitoring: Continue monitoring due to DNSBL listings and geolocation inconsistencies.

Investigation: Correlate with US-based traffic if observed, noting routing discrepancy with African registration data.

---

Assessment: The IP represents moderate risk primarily due to DNSBL listings and geolocation data conflicts. No active threat indicators present. Recommend continued monitoring rather than immediate blocking.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.