82.178.154.254📋 Copy

# IP Intelligence Briefing: 82.178.154.254/32

## Executive Summary

IP 82.178.154.254 is classified as a Moderate Risk address (Risk Score: 40) originating from Oman. The address is associated with Oman Telecommunications Company (AS28885) and belongs to the 82.178.152.0/22 block. No active threat indicators or malicious behavior have been detected, though the IP has been listed on 2 out of 8 DNSBLs. The subnet maintains a clean classification with zero abuse density.

## Network Infrastructure

• ASN: 28885 (OMANTEL-NAP-AS — Oman Telecommunications Company (S.A.O.G))
• Country: Oman (OM)
• City/Region: Ruwi, MA
• BGP Prefix: 82.178.152.0/22
• Registration Date: 2003-09-05
• RIR: RIPE

## Threat Indicators

• Risk Score: 40 (Moderate)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 2 DNSBL listings
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Attacker: No
• Threat Persistence: 0 days observed
• Campaign Correlation: None detected

## Network Role & Services

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• DNS Records: No forward resolution, no PTR hostnames
• Email Authentication: No SPF or DMARC records configured
• Infrastructure Type: Not cloud, CDN, VPN, proxy, or hosting infrastructure

## Control Plane Analysis

• Origin ASN: 28885
• RPKI State: Not evaluated
• Route Stability: Not stable
• MOAS: No
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)

## Observation History

The IP has been observed 17 times across the monitoring period. Key observations include:

• 2026-06-25: Routing and reputation signals recorded with low confidence scores
• 2026-06-05: ASN confirmation (AS28885), geographic location (Ruwi, OM), and network prefix (82.178.152.0/22) verified
• No significant threat-related signals or campaign activity detected

## Neighborhood Analysis

• Subnet: 82.178.154.0/24
• Abuse Density: 0%
• Classification: Clean
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 0

## Relationships

The IP maintains multiple relationships to the network identifier "OM-GTO-OMAN-20030905," confirming its association with the Omani telecommunications infrastructure.

## Recommended Actions

Based on the moderate risk profile, the following firewall rules are recommended:

## Analyst Notes

This IP address presents a moderate risk profile primarily due to DNSBL listings. However, there is no evidence of active malicious activity, and the subnet exhibits clean characteristics. The lack of open services suggests the IP may be reserved or firewalled. SOC teams may consider blocking based on organizational policy for IPs with DNSBL listings, but the absence of active threat indicators suggests this is a precautionary measure rather than a response to confirmed malicious activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.