156.225.1.40📋 Copy

# IP Intelligence Briefing: 156.225.1.40/32

Classification: Low Risk | Risk Score: 25 | Status: Firewalled / No Services

---

## Executive Summary

IP 156.225.1.40 is a low-risk address assigned to Cloud Innovation Support (ASN 9465) within the 156.225.1.0/24 block. The IP shows no active services, no open ports, and no evidence of malicious activity. Control plane analysis indicates the IP has been DNSBL listed on 1 of 8 total lists with minimal operator score (0.1304).

---

## Network Ownership & Geolocation

• Organization: Cloud Innovation Support
• ASN: 9465 (Cloud Innovation Support)
• CIDR Block: 156.225.1.0/24
• Geolocation: Seychelles (SC)
• RIR: ARIN
• Registration Date: Not available

---

## Threat Indicators

• Blacklist Count: 0
• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Threat Campaigns: None detected
• Abuse Confidence Score: Not applicable

---

## Network Services & DNS

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• PTR Hostnames: None
• Forward Resolution: 0 records
• Email Authentication: No SPF or DMARC records
• Service Purpose: Firewalled / No Services

---

## Control Plane Analysis

• Origin ASN: 9465
• BGP Prefix: 156.225.1.0/24
• Route Stability: False
• RPKI State: Not available
• IRR Consistency: Not available
• DNSSEC Valid: True
• Operator Score: 0.1304 (Minimal)

---

## Neighborhood Analysis (156.225.1.0/24)

• Total Sibling IPs: 36
• Abuse Density: 0 (clean)
• Subnet Classification: Clean
• Inherited Risk: 0
• Threat Siblings: 0
• Risk Distribution: High: 0, Medium: 4, Low: 28

Notable higher-risk neighbors in the same subnet include 156.225.1.42 (risk score 65), 156.225.1.30 (40), 156.225.1.37 (40), 156.225.1.112 (50), and 156.225.1.96 (25).

---

## Historical Observations

Nine signal observations recorded, with recent activity from 2026-07-25. Geolocation data shows some inconsistency between sources (Seychelles vs. Hong Kong). DNSBL listing activity detected in one signal. No persistent threat behavior observed.

---

## Threat Intelligence Assessment

The IP 156.225.1.40 presents minimal threat. No active services, no open ports, and no threat indicators. The subnet maintains a clean classification with low abuse density. While one neighbor (156.225.1.42) shows elevated risk, the target IP itself is unremarkable. No firewall actions recommended; maintain monitoring for service initiation or behavioral changes.

---

Analyst Notes: Monitor for service port openings or DNSBL listing changes. The subnet's clean profile suggests legitimate cloud/hosting infrastructure usage.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.