5.162.9.239📋 Copy

# Intelligence Briefing: IP 5.162.9.239/32

Classification: Low Risk

Date: 2026-07-25

Analyst: IPDebrief Intelligence

---

## Executive Summary

IP 5.162.9.239 is classified as Low Risk with a risk score of 0. The address belongs to Nawras-NOC (ASN 50010), a legitimate Oman-based telecommunications operator. No active threats, malware indicators, or abuse signals were detected during the assessment period.

---

## Ownership and Network Context

• ASN: 50010
• Organization: Nawras-NOC
• Network Name: NAWRAS-NET
• CIDR Block: 5.162.0.0/18
• RIR: RIPE
• Abuse Contact: Available via RDAP (engdataipcore@ooredoo.om)

---

## Geolocation Analysis

Primary Location: Oman (OM)

• City: Central Sultanate of Oman
• DNS PTR: dynamic.isp.ooredoo.om
• Domain: ooredoo.om

Note: Geolocation sources show conflicting data (France/Marseille vs. Oman), but ownership and DNS records consistently point to Omani telecommunications infrastructure. This discrepancy is common with multi-homed residential/mobile ISP allocations.

---

## Threat Intelligence Assessment

Risk Indicators

• Risk Score: 0
• Abuse Confidence Score: N/A
• Blacklist Status: Clean (0 listings)
• Threat Feeds: None detected
• Known Campaigns: None associated

Malware/Abuse Signals

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0

Network Services

• Open Ports: None detected
• Connection Type: Firewalled / No Services
• Infrastructure: Not cloud, CDN, VPN, proxy, or hosting

---

## Neighborhood Analysis (5.162.9.0/24)

• Total Siblings: 0 active neighbors detected
• Abuse Density: 0%
• Threat Siblings: 0
• Risk Distribution: High: 0, Medium: 0, Low: 0

The /24 subnet shows no adjacent risk concentration, indicating isolated legitimate usage.

---

## Historical Observations (15 signals over observation window)

Recent Observations (2026-07-25):

• 18:04: Subnet classified as "clean" with 0 abuse density
• 18:02: ASN 50010 / Nawras-NOC confirmed
• 18:01: DNS resolution to ooredoo.om (CAA records absent)
• 18:00: DNS blacklist scan (8 total lists, 0 listings)

Temporal Analysis:

• Ownership changes: 0
• Threat persistence days: 0
• Persistently malicious: No

---

## Relationship Graph

---

## Recommended Actions

Current Risk Score: 0

Recommendations: None

Given the low risk profile and legitimate telecom infrastructure status, no immediate blocking or mitigation actions are recommended. Standard allow-listing for trusted Omani ISP traffic is appropriate.

---

## Intelligence Conclusion

IP 5.162.9.239 represents legitimate telecommunications infrastructure operated by Nawras-NOC in Oman. The address shows no evidence of malicious activity, abuse, or threat association. The geolocation discrepancy between France and Oman appears to be a data quality issue with geolocation providers rather than actual misattribution. The IP is suitable for allow-listing in network security policies and should not trigger security alerts under normal conditions.

Disposition: Monitor but no action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.