41.82.84.92📋 Copy

# IP Intelligence Briefing: 41.82.84.92/32

## Executive Summary

IP 41.82.84.92 presents a moderate risk profile (55/100) with significant geographic inconsistencies and DNS blacklist listings. The IP belongs to Alpha Mbodj (ASN 8346) but exhibits conflicting geolocation data between claimed US origin and observed Senegalese location. Despite showing no active services, the IP is listed on three DNS blacklists with high severity ratings.

---

## Technical Profile

Ownership & Registration:

• Organization: Alpha Mbodj
• ASN: 8346
• CIDR Block: 41.82.64.0/18 (41.82.64.0 - 41.82.127.255)
• RIR: AFRINIC

Geolocation Analysis:

• Claimed Location: New York, US
• Observed Location: Thiès, Senegal (14.7894°N, 16.926°W)
• Distance Discrepancy: 4,675.5 km from claimed location
• Minimum Possible RTT: 93.5ms vs observed 161.2ms average

Network State:

• Service Status: Firewalled / No Services (0 open ports)
• Network Role: Infrastructure not classified as CDN, hosting, proxy, or VPN
• DNS Status: No PTR records, no forward resolution

Threat Indicators:

• Blacklist Status: Listed on 3 of 8 DNS blacklists (high severity)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Correlation: None identified

---

## Observation History (14 Observations)

Temporal Signals:

• Latest Activity: 2026-07-24T10:18:08 UTC
• Threat Persistence: 0 days observed
• Ownership Changes: 0
• Is Persistently Malicious: No

Anomaly Detection:

• Geolocation Inconsistency: Multiple conflicting country codes (US, SN) detected
• RTT Anomaly: Observed RTT exceeds minimum plausible RTT by 67.7ms
• DNSBL Listings: 3 DNS blacklist entries with high severity ratings

---

## Subnet Analysis

Subnet: 41.82.84.92/24

• Abuse Density: 0
• Classification: Clean
• Inherited Risk: 0
• Total Siblings: 1
• Active/Threat Siblings: 0

Relationship Graph:

• Only same-network relationships identified (41.82.64.0 - 41.82.127.255)
• No associated hostnames, organizations, or certificates detected

---

## Recommended Security Actions

Priority: High (Risk Score 55/100)

Monitoring:

• Increase logging verbosity for traffic from this IP
• Review recent activity patterns and connection attempts

Firewall Rules:

---

## Intelligence Assessment

Key Risk Factors:

1. Geographic spoofing (claimed US, observed Senegal)

2. Multiple DNS blacklist entries despite no service exposure

3. Elevated risk score with no clear malicious activity pattern

Recommendations:

• Block at perimeter firewall pending additional correlation
• Monitor for any service emergence on this IP
• Verify if Alpha Mbodj is the legitimate owner or if this is misconfigured infrastructure

Confidence Level: Moderate – Requires correlation with traffic logs and incident data before definitive action.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.