176.29.251.114📋 Copy

# IP Intelligence Briefing: 176.29.251.114/32

Date: Current

Classification: Low Risk / Clean

Reported by: IPDebrief Automated Intelligence System

## Executive Summary

IP address 176.29.251.114 is classified as a low-risk address associated with Jordan-based network infrastructure (JO-ZAIN, ASN 48832). The IP exhibits minimal operator risk (0.1304), no active threat indicators, and is registered within the RIPE RIR. Current operational status shows the address is firewalled with no active services or open ports.

## Ownership and Geolocation

## Risk Assessment

• Overall Risk Score: 25/100 (Low Risk)
• Reputation: Low Risk
• Operator Score: 0.1304 (Minimal)
• Abuse Confidence: Not applicable (no active abuse detected)
• Threat Indicators: None
• Blacklist Status: 0 current listings (1 historical listing noted)

## Network Activity Status

• Open Ports: None detected
• DNS Resolution: Not resolving
• TLS Certificates: None
• HTTP Services: None detected
• Service Classification: Firewalled / No Services
• Traffic Pattern: Inactive

## Threat Indicators

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Malware Campaign: No associations
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0

## Control Plane Analysis

• BGP Prefix: 176.29.251.0/24
• Route Stability: False
• RPKI State: Not available
• DNSSEC Valid: True
• DNSBL Lists: 1 (historical), currently 0
• IRR Consistency: Not available

## Neighborhood Analysis

Subnet analysis for 176.29.251.0/24:

The /24 subnet demonstrates no neighbor activity and minimal abuse density, indicating a quiet network segment.

## Historical Observations

Thirteen signal observations recorded, most recent on 2026-07-24:

• Threat Persistence: 0 days (not persistently malicious)
• Ownership Changes: 0
• Recent Signals:

- Minimal operator score (0.1304)

- Jordan geolocation confirmed via Alienvault-OTX

- Historical DNSBL listing with high severity noted (current: 0)

- Clean subnet classification maintained

## Related Entities

• Same Network: JO-ZAIN (2 relationship records)

## Recommended Actions

Given the low-risk profile and lack of active threat indicators, the following actions are recommended:

1. Monitoring: Continue standard passive monitoring

2. Firewall Rules: No blocking required at this time

3. Threat Intel Feed: No additions necessary

4. Investigation Priority: Low

## Conclusion

IP 176.29.251.114 represents Jordanian network infrastructure (JO-ZAIN/AS48832) with current firewalled status and no active threat indicators. The address shows historical DNSBL activity but maintains a clean reputation with minimal operator risk. No immediate threat action is required; continue standard monitoring practices.

---

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.