176.29.20.173📋 Copy

IP INTELLIGENCE BRIEFING

Target: 176.29.20.173/32

Classification: Low Risk

Date: 2026-07-30

Executive Summary

IP 176.29.20.173 was assessed as a low-risk address with no active threat indicators. The IP belongs to network JO-ZAIN (ASN: 48832) operated by LINKdotNET, registered with RIPE, and geolocated to Amman, Jordan. No malicious activity or threat associations were observed.

Network Profile

• ASN: 48832 (LINKdotNET-RIPE-MNT)
• Organization: JO-ZAIN
• CIDR Block: 176.29.0.0/16
• Geolocation: Amman, Amman Governorate, Jordan (JO)
• Coordinates: 31.96°N, 35.94°E
• Network Role: Firewalled / No Services
• Risk Score: 0
• Provider/Authority Scores: 0

Threat Assessment

The IP addressed no known threat indicators. Analysis confirmed:

• No known attacker associations
• No spam source designation
• Zero blacklist listings
• No Tor exit node status
• No known campaign affiliations
• No abuse confidence scoring
• No open ports or active services detected

Historical Observations

Fourteen signal observations were recorded, with the most recent occurring on 2026-07-30. Historical data indicates:

• No ownership changes
• No persistent malicious behavior
• Threat observation count: 0
• Signal confidence levels ranged from 0.30 to 0.85 across network classification, geolocation, and service signals

Subnet Analysis

The /24 subnet (176.29.20.0/24) showed minimal activity:

• Abuse Density: 0
• Classification: Clean
• Active Siblings: 1
• Threat Siblings: 0
• Neighbor IP: 176.29.20.229 (Risk Score: 25, Authority Score: 50)

Relationship Graph

Four relationships were identified, all linking to network entity JO-ZAIN. No hostname, organizational, or certificate associations beyond the network designation were discovered.

Recommended Actions

No firewall rules or security actions were generated due to the absence of risk indicators. The IP requires no blocking or monitoring restrictions based on current threat intelligence.

Intelligence Notes

The IP address operates as a firewalled endpoint with no accessible services. While the single neighbor IP (176.29.20.229) carries a risk score of 25, the overall subnet maintains a clean classification with zero abuse density. Continuous monitoring is not warranted at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.