192.252.180.10📋 Copy

# IP INTELLIGENCE BRIEFING: 192.252.180.10

Classification: Moderate Risk – No Active Threat Indicators

Date: Current Assessment

Source: IPDebrief Threat Intelligence Platform

## Executive Summary

IP address 192.252.180.10 presents a moderate risk profile (Score: 50/100) with no active threat indicators. The address is assigned to Integen, Inc (ASN 152194) within the INTEGEN-2 network block (192.252.176.0/20). No open services, threat campaigns, or malicious activity patterns have been detected. The IP demonstrates clean neighborhood characteristics with zero abuse density in its /24 subnet.

---

## Technical Profile

Ownership & Network:

• Organization: Integen, Inc
• ASN: 152194
• Network: INTEGEN-2 (192.252.176.0/20)
• RIR: ARIN
• Registration: Commercial ISP allocation

Geolocation:

• Country: United States (US)
• Geo-Consensus: Validated
• Plausibility: Confirmed

Risk Assessment:

• Overall Risk Score: 50 (Moderate)
• Provider Score: 0
• Authority Score: 0
• Stability: Stable ownership (0 changes)
• Classification: Clean subnet

---

## Threat Intelligence

Malicious Activity Indicators:

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Pulsedive Risk: Not applicable
• Known Campaigns: None detected

Control Plane Analysis:

• BGP Prefix: 192.252.180.0/24
• Route Stability: Unstable (0 route changes in 30 days)
• DNSBL Listings: 2/8 total lists
• RPKI State: Not verified
• Operator Score: 0.1304 (Minimal)

Service Exposure:

• Open Ports: None detected
• Services: Firewalled / No Services
• TLS Certificates: None
• Email Auth: SPF, DMARC, TXT records absent

---

## Neighborhood Analysis

Subnet: 192.252.180.0/24

• Abuse Density: 0%
• Classification: Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

Risk Distribution: High (0), Medium (0), Low (0)

---

## Relationship Graph

Associated Entities: 4 relationships identified

• All relationships map to INTEGEN-2 network block
• No cross-network, hostname, organization, or certificate associations
• No external entity correlations detected

---

## Observation History

Signal Timeline: 17 observations recorded

• Latest: 2026-07-27T11:36:37Z
• Confidence Range: 0.30–0.90
• Signal Types: Port scans, subnet abuse density, network role, ownership data

Behavioral Trends:

• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No
• Honeypot Hits: 0
• WAF Violations: 0
• Enumeration Strikes: 0

Network Traceroute:

• Hop Count: 12
• Transit Networks: Comcast
• First Hop RTT: 0.4ms
• Last Hop RTT: 252.4ms
• Timed Out Hops: 0

---

## Recommended Actions

Firewall Rules:

• No immediate blocking required based on current profile
• Monitor for service changes if this IP begins accepting connections

SIEM/Logging:

• Log connection attempts for baseline activity
• No specific threat indicators require immediate alerting

Monitoring Priority:

• Medium
• Track for emergence of services or threat indicators

---

## Intelligence Narrative

IP 192.252.180.10 is a stable infrastructure address with no current malicious activity. The moderate risk score (50) reflects a baseline ISP allocation rather than active threat behavior. The subnet demonstrates clean characteristics with zero abuse density, and no sibling IPs in the /24 block show malicious indicators. The address has been consistently assigned to Integen, Inc with stable ownership. No threat campaigns, blacklisting, or known attacker associations have been identified. While the BGP prefix shows instability (0 route changes in 30 days), this is consistent with commercial ISP routing patterns. The absence of open services indicates proper firewall configuration or a reserved address space. SOC teams may observe occasional port scan activity without threat significance. No immediate action required; maintain monitoring posture.

---

Report Generated: IPDebrief Intelligence Platform

Confidentiality: Internal Threat Intelligence Use

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.