41.82.72.38
# Threat Intelligence Briefing: 41.82.72.38/32
Classification: Moderate Risk (Risk Score: 55/100)
Observation Period: 2026-07-28 through 2026-09-04
Network Ownership and Geolocation
The IP address is registered to ASN 8346 (Alpha Mbodj) within the 41.82.64.0/18 block under AfriNIC. Geolocation data indicates New York, United States, though source consensus is inconclusive with a noted contradiction between US and SN.
Threat Assessment
Analysis identified 3 DNS blocklist listings out of 8 total checks. Behavioral logs captured network scanning attempts and ICMP probe activity. No active threat indicators, known campaigns, or Tor exit node activity were detected. The address remains a standalone threat with 0 threat siblings in the /24 subnet.
Network Services
Service scans confirmed the host is firewalled with no open ports, TLS certificates, or active web services.
Recommended Action
SOC teams are advised to block traffic from this address immediately.
Firewall Rules
* iptables: `iptables -A INPUT -s 41.82.72.38 -j DROP`
* nftables: `nft add rule inet filter input ip saddr 41.82.72.38 drop`
* nginx: `deny 41.82.72.38;`
Additional Notes
Monitoring should continue for the 41.82.72.0/24 subnet to detect correlated activity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Alpha Mbodj |
| ASN | AS8346 |
| Network Name | 41.82.64.0 - 41.82.127.255 |
| CIDR Block | 41.82.64.0/18 |
| RIR | AFRINIC |
| Country | SN |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8346 |
| Network Prefix | 41.82.64.0/20 |
| Route mapping | Found |
| RPKI Status | Valid |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 21% | 2 | 4 |
| routing | 37% | 3 | 4 |
| services | 12% | 2 | 2 |
| ownership | 27% | 3 | 3 |
| reputation | 20% | 1 | 3 |
| geolocation | 12% | 2 | 2 |
| Overall | 21% | 13 | 18 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-17 11:04:53 UTC |
| Last Seen | 2026-09-04 20:33:01 UTC |
| Profile Built | 2026-09-04 20:47:35 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 32 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 41.82.72.38
Who owns the IP address 41.82.72.38?
41.82.72.38 is registered to Alpha Mbodj. The address falls within the 41.82.64.0/18 network block. Registration is held at AFRINIC.
Where is 41.82.72.38 located?
Geolocation data places 41.82.72.38 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 41.82.72.38 malicious or safe?
41.82.72.38 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.