194.226.163.178
# IP Intelligence Briefing: 194.226.163.178/32
Date: Current Analysis
Classification: Low Risk / Legitimate Infrastructure
Reported By: IPDebrief Intelligence Platform
---
## Executive Summary
IP 194.226.163.178 is a low-risk residential infrastructure address associated with REG.RU Ltd, a legitimate domain names registrar. No active threat indicators, blacklist listings, or malicious behavior observed. The IP belongs to a clean subnet with zero abuse density.
Recommended Action: No blocking required. Standard logging and monitoring applicable.
---
## Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 0 (Low Risk) |
| **ASN** | 197695 (AS-REGRU) |
| **Organization** | Domain names registrar REG.RU, Ltd |
| **Country** | Russian Federation (RU) |
| **CIDR Block** | 194.226.163.0/24 |
| **Service State** | Firewalled / No Services |
| **DNSSEC** | Valid |
---
## Threat Indicators
- Abuse Confidence Score: None detected
- Blacklist Status: 0 listings across 8 monitored feeds
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Proxy Service: No
- Known Campaigns: None associated
---
## Network Neighborhood Analysis
Subnet: 194.226.163.0/24
Abuse Density: 0 (Clean)
Total Siblings: 2
Active Siblings: 0
Threat Siblings: 0
Neighbor IP: 194.226.163.16
- Risk Score: 0
- Authority Score: 50
- Classification: Clean
---
## Historical Observation Summary
Total Observations: 13 signals
Latest Signal: 2026-07-24T17:10:52Z
Threat Persistence: 0 days
Ownership Changes: 0
Recent observations confirm:
- Stable geolocation attribution to RU (5000km accuracy)
- Consistent ASN attribution (197695)
- Valid DNSSEC signatures
- No DNSBL listings over observation period
---
## Relationship Graph
- Network Association: REGRU (2 entries)
- No external relationships to malicious entities, hostnames, or certificates detected
---
## SOC Analyst Recommendations
1. Traffic Allowance: Permitted for inbound/outbound. No firewall blocking required.
2. Monitoring: Standard logging applicable. No enhanced monitoring needed.
3. Block Decision: Do not block. IP represents legitimate registrar infrastructure.
4. Threat Hunting: No indicators for threat hunting. Subnet shows clean classification.
---
## Evidence Sources
- ASN data from team-cymru-dns
- RIR registry: RIPE
- Geolocation: Multi-signal inference (2 evidence sources)
- DNSSEC validation: Confirmed valid
Conclusion: This IP address represents legitimate telecommunications infrastructure for REG.RU. No defensive action required beyond standard network operations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | "Domain names registrar REG.RU", Ltd |
| ASN | AS197695 |
| Network Name | REGRU |
| CIDR Block | 194.226.163.0/24 |
| RIR | RIPE |
| Country | RU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS197695 |
| Network Prefix | 194.226.163.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 00:51:01 UTC |
| Last Seen | 2026-08-27 00:43:36 UTC |
| Profile Built | 2026-08-29 06:47:28 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 194.226.163.178
Who owns the IP address 194.226.163.178?
194.226.163.178 is registered to "Domain names registrar REG.RU", Ltd. The address falls within the 194.226.163.0/24 network block. Registration is held at RIPE.
Where is 194.226.163.178 located?
Geolocation data places 194.226.163.178 in Russia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 194.226.163.178 malicious or safe?
194.226.163.178 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.