# 5.192.89.28 — IP Intelligence Summary

5.192.89.28 is an IPv4 address operated by ETISALAT-MNT (AS5384), geolocated to United States. As of August 30, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/5.192.89.28
- Last updated: 2026-08-30

## Ownership

- Organization: ETISALAT-MNT
- Network name: GPRS-EMIRNET
- Allocated block: 5.192.0.0/16
- ASN: AS5384 (https://ipdebrief.com/asn/5384)
- Regional registry: RIPE

## Location

- City: —
- Region: —
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (0/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IPDebrief Intelligence Briefing

**Target:** 5.192.89.28/32

**Classification:** Network Infrastructure / Low Risk

**Date:** 2026-07-26

**Prepared For:** SOC Operations Team

\---

\## Executive Summary

IP address 5.192.89.28 presents a **LOW RISK** profile with a risk score of 0. The address is assigned to ETISALAT-MNT (GPRS-EMIRNET) under ASN 5384 within the RIPE registry. No active threat indicators, malicious campaigns, or abuse history detected. The IP is currently firewalled with no open services.

\---

\## Ownership and Network Classification

| Attribute | Value |

|-----------|-------|

| **ASN** | 5384 |

| **Organization** | ETISALAT-MNT |

| **Network Name** | GPRS-EMIRNET |

| **CIDR Block** | 5.192.0.0/16 |

| **RIR** | RIPE |

| **Abuse Contact** | abuse@emirates.net.ae |

| **Network Role** | Firewalled / No Services |

The IP belongs to a large infrastructure block (5.192.0.0/16) operated by a telecommunications entity. The control plane indicates the BGP prefix is 5.192.64.0/18 with unstable routing (isRouteStable: false).

\---

\## Threat Intelligence Assessment

**Current Risk Status:** LOW RISK (Score: 0)

**Threat Indicators:**

\- Known Attacker: **No**

\- Spam Source: **No**

\- Tor Exit Node: **No**

\- Blacklist Count: **0**

\- Abuses Confidences Score: **Not applicable**

\- Threat Feeds: **None**

**Campaign Correlation:**

\- Campaign Likelihood: **None**

\- CERT Matches: **0**

\- Correlated IPs: **0**

\- Banner Matches: **0**

\---

\## Network Services and DNS Analysis

**Open Ports:** None detected

**DNS Resolution:** No forward resolution available

**PTR Records:** None

**Hosted Domains:** 0

**Email Authentication:** SPF/DMARC not configured

The IP shows no active services, consistent with a firewalled infrastructure assignment. No TLS certificates or HTTP services were observed.

\---

\## Geographic and Routing Data

**Geolocation:** United States (US)

**GeoValidation:** ICMP blocked - unable to validate

**Distance:** 5125.7 km

**RTT:** Unable to validate

**Traceroute:** 28 hops

**Transit Networks:** Comcast, NTT

**Routing Status:**

\- Origin ASN: 5384

\- BGP Prefix: 5.192.64.0/18

\- Route Stability: **Unstable** (isRouteStable: false)

\- Route Changes (30d): 0

\---

\## Historical Observation Analysis

**Total Observations:** 16

**Observation Period:** Recent activity on 2026-07-26

**Temporal Indicators:**

\- Ownership Changes: 0

\- Threat Observation Count: 0

\- Threat Persistence Days: 0

\- Persistently Malicious: **False**

Recent signal types include port scans, DNS lookups, ownership verification, and network classification checks. No escalation in threat activity observed.

\---

\## Network Neighborhood Assessment

**Subnet:** 5.192.89.28/24

**Abuse Density:** 0 (Low)

**Total Siblings:** 1

**Active Siblings:** 0

**Threat Siblings:** 0

**Neighbor Analysis:**

| IP Address | Risk Score | Authority Score | Classification |

|------------|------------|-----------------|----------------|

| 5.192.89.50 | 25 | 50 | Low Risk |

The immediate /24 subnet contains minimal risk exposure with one neighbor IP (5.192.89.50) showing a risk score of 25. Overall neighborhood abuse density remains negligible.

\---

\## Relationship Graph

**Total Relationships:** 3

**Relationship Types:** Same Network (GPRS-EMIRNET) × 3

The IP has multiple network-level relationships pointing to the parent network entity GPRS-EMIRNET.

\---

\## Security Actions and Recommendations

**Recommended Actions:** None

**Firewall Rules:** Not required based on current risk profile

The IP address does not warrant blocking or additional security controls at this time. Standard monitoring practices are sufficient given the low-risk classification and absence of threat indicators.

\---

\## Intelligence Summary

IP 5.192.89.28 is a low-risk infrastructure address with no active malicious activity. The IP is firewalled with no open services, making it unsuitable for direct exploitation. Network routing is unstable, and geographic validation could not be completed due to ICMP blocking. No actionable threat indicators or firewall rules are recommended. Continue standard monitoring practices.

\---

*Intel produced by IPDebrief Analysis Platform*

## Nearby addresses

- 5.192.89.17 (https://ipdebrief.com/5.192.89.17)
- 5.192.89.50 (https://ipdebrief.com/5.192.89.50)
- 5.192.89.245 (https://ipdebrief.com/5.192.89.245)

---

Source: IPDebrief, "5.192.89.28 IP intelligence", https://ipdebrief.com/5.192.89.28, updated 2026-08-30. Assessments are probabilistic.