176.28.172.228📋 Copy

# IP Intelligence Briefing: 176.28.172.228/32

## Executive Summary

IP address 176.28.172.228 presents a low-risk profile with no active threat indicators detected. The address belongs to the JO-ZAIN network infrastructure under RIPE registry registration. Current observations show clean classification with zero abuse density in the associated subnet.

## Network Ownership & Classification

• ASN: 48832
• Organization: LINK-RIPE-MNT (JO-ZAIN)
• CIDR Block: 176.28.128.0/17
• RIR: RIPE
• Network Role: Firewalled / No Services
• Abuse Contact: Available via RDAP

## Geolocation Data

• Country: United States (US)
• Region: US-NY
• City: New York
• Timezone: America/New_York
• Note: Geo-validation flagged as implausible with only two geo source reports, indicating potential location data inconsistency

## Threat Intelligence Assessment

• Overall Risk Score: 0 (Low Risk)
• Abuse Confidence Score: Not available
• Blacklist Count: 0
• Threat Indicators: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None identified
• DNSBL Listings: 0 out of 8 checked lists

## Network Infrastructure Status

• Open Ports: None
• TLS Certificate: No
• HTTP Services: No
• DNS Records: No forward resolution
• Hosted Domains: 0
• Email Authentication: No SPF/DMARC records found
• DNSSEC: Valid

## Control Plane Analysis

• BGP Prefix: 176.28.172.0/24
• Origin ASN: 48832
• Route Stability: False (0 route changes in 30 days)
• RPKI State: Not available
• IRR Consistency: Not available
• DNSSEC: Valid

## Neighborhood Analysis (176.28.172.0/24)

• Subnet Classification: Clean
• Abuse Density: 0
• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• Risk Distribution: No high/medium/low risk neighbors detected

## Historical Signal Observations

Fourteen observations recorded through July 23, 2026:

• Classification: Consistently marked as "clean"
• Abuse Density: 0 across all observations
• Ownership Changes: 0
• Threat Persistence: None detected
• Recent Activity: No threat observations or malicious behavior signals

## Related Entities

• Network Relationships: Two entries linking to JO-ZAIN network
• Correlated IPs: None identified

## Recommended Security Actions

No immediate firewall or blocking actions required. The IP presents no active threat indicators and demonstrates clean behavioral patterns across observation history.

## Analyst Notes

• IP shows no active service exposure or open ports
• No threat intelligence feeds flagged this address
• Subnet demonstrates zero abuse density
• Route stability flag indicates potential routing dynamics worth monitoring
• Consider geo-validation inconsistency when correlating with other intelligence sources

Classification: LOW RISK

Action Required: None

Monitoring Priority: Standard

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.