176.29.26.229📋 Copy

# IP Intelligence Briefing: 176.29.26.229/32

Classification: LOW RISK | Date: Current Assessment | Status: Active Monitoring

## Executive Summary

IP address 176.29.26.229 is associated with Jordanian infrastructure operator JO-ZAIN (ASN 48832). Risk assessment indicates LOW RISK with a risk score of 25/100. The IP has no active threat indicators, no open services, and demonstrates stable network classification.

## Ownership and Geolocation

• Organization: JO-ZAIN
• ASN: 48832 (LINKdotNET-RIPE-MNT)
• CIDR Block: 176.29.0.0/16
• Location: Amman, Jordan (31.95°N, 35.94°E)
• RIR: RIPE
• Registration: Network infrastructure block

## Risk Assessment

Threat Indicators: None detected

• Not a Tor exit node
• Not flagged as known attacker
• Not identified as spam source
• Zero active blacklist hits

## Network Classification

• Services: None detected (Firewalled / No Services)
• Open Ports: None
• DNS Resolution: None
• Hosted Domains: None
• Email Reputation: Not scored
• Infrastructure Type: Not CDN, not hosting, not residential

## Neighborhood Analysis (176.29.26.0/24)

• Abuse Density: 0% (clean)
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0
• Subnet Classification: Clean

Neighbor: 176.29.26.211 (no risk score available)

## Observation History

13 observations recorded. Recent signal analysis (2026-07-24) shows:

• Operator Score: 0.1304 (minimal)
• DNSSEC: Valid
• Geolocation: Confirmed via multiple sources
• Subnet Classification: Clean with zero inherited risk
• Threat Observations: None

One historical blacklist listing noted with maximum severity of "high" in past observations, but current status shows no active threat flags.

## Relationship Graph

• Same Network: JO-ZAIN (2 relationships)
• Associated Networks: None beyond parent subnet

## Recommended Actions

No specific firewall rules or blocking recommendations generated. IP exhibits benign characteristics consistent with legitimate network infrastructure.

Recommended Approach:

• Monitor for service activation (currently firewalled)
• No immediate blocking or mitigations required
• Include in threat correlation monitoring for emerging indicators

---

Analyst Notes: This IP represents legitimate Jordanian network infrastructure with no current malicious activity. The low risk score, clean subnet classification, and absence of threat indicators support continued monitoring without defensive action.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.