37.28.64.103📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target IP: 37.28.64.103/32

Classification: Low Risk / Defensive Interest Only

Report Date: 2026-07-24

Analyst: Automated Intelligence System

---

## EXECUTIVE SUMMARY

IP address 37.28.64.103 is classified as Low Risk with a risk score of 0. The IP belongs to Nawras-NOC (AS50010) and is registered under the NAWRAS-NET CIDR block (37.28.64.0/22). No malicious indicators, active services, or threat associations were detected. The IP is currently firewalled with no open services exposed.

---

## OWNERSHIP & REGISTRATION

• Organization: Nawras-NOC
• Network Name: NAWRAS-NET
• ASN: 50010
• CIDR Block: 37.28.64.0/22
• RIR: RIPE
• Abuse Contact: engdataipcore@ooredoo.om
• Registration Status: Active (6115 days since delegation)

---

## GEOGRAPHIC ATTRIBUTION

Geolocation data shows inconsistencies across multiple sources:

• Primary Classification: France (FR), Marseille
• Secondary Classification: Oman (OM), Sultanate of Oman
• GeoConsensus: False
• GeoPlausible: False

This geographic discrepancy warrants monitoring but does not indicate malicious activity. The IP is associated with the ooredoo.om domain in PTR records, suggesting a connection to Ooredoo's network infrastructure.

---

## NETWORK ROLE & CLASSIFICATION

• Primary Role: Firewalled / No Services
• Open Ports: None detected
• Infrastructure Type: Not classified as CDN, Cloud, VPN, Proxy, Tor, or Hosting
• Connection Type: Not specified
• Provider Status: Not a known provider network

The IP currently has no active services exposed, indicating proper firewall hardening.

---

## THREAT INDICATORS

• Risk Score: 0
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Campaign Association: None identified
• Threat Persistence Days: 0

No threat indicators present. The IP shows no historical malicious behavior.

---

## SERVICE & DNS ANALYSIS

• Forward Resolution: dynamic.isp.ooredoo.om
• PTR Hostnames: dynamic.isp.ooredoo.om
• Forward Resolution Count: 1
• Hosted Domains: None
• Email Authentication: SPF and DMARC configured
• TLS Certificate: None
• HTTP Title: None
• Banner Information: None

DNS records indicate dynamic ISP assignment. No web services or email hosting detected.

---

## TEMPORAL ANALYSIS

• Ownership Changes: 0
• Threat Observation Count: 0
• Persistently Malicious: False
• Route Stability: Not stable (1 route change in 30 days)

The IP demonstrates stable ownership with no malicious activity patterns over time.

---

## NETWORK NEIGHBORHOOD

• Subnet: 37.28.64.103/24
• Abuse Density: 0
• Neighbor Count: 0
• Threat Siblings: 0
• Active Siblings: 0
• Classification: None

No neighboring IP addresses detected within the /24 subnet. The subnet shows no abuse activity.

---

## RELATED ENTITIES

• Network Associations: NAWRAS-NET (duplicate entries)
• DNS Associations: dynamic.isp.ooredoo.om (3 entries)
• Certificate Matches: None
• Correlated IPs: 0

---

## RECOMMENDED ACTIONS

Based on current risk assessment, no blocking or monitoring actions are recommended. The IP presents no threat indicators and is properly firewalled.

Suggested Actions:

• Allow traffic (no restrictions required)
• No firewall rules needed
• No monitoring alerts configured

---

## CONCLUSION

IP 37.28.64.103 is a low-risk, benign address belonging to Ooredoo's infrastructure (Nawras-NOC). No malicious activity, threat indicators, or suspicious behavior detected. Geographic attribution inconsistencies between France and Oman are noted but do not impact threat posture. The IP is firewalled with no exposed services. No further action required beyond standard logging.

---

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.