130.61.40.167📋 Copy

IP Intelligence Briefing: 130.61.40.167

Date: 2026-06-10

---

**1. Risk Profile**

• Overall Risk Score: Low (25/100)
• Provider Reputation: Oracle Public Cloud (reputable enterprise infrastructure)
• Threat Indicators: No malicious activity detected (no blacklists, spam, or known attacker associations).
• Network Classification: CloudCompute (Oracle Cloud) | Hosting: False | CDN: False | Residential: False

---

**2. Geolocation & Ownership**

• Location: Frankfurt am Main, Hesse, Germany (US-based provider, but geolocated in Germany).
• ASN: AS31898 | Organization: Oracle Corporation
• Subnet: 130.61.40.167/32 (single host, no sibling IPs detected).
• Abuse Density: 0% (clean subnet).

---

**3. Network & Service Activity**

• Open Ports: SSH (port 22, OpenSSH 7.4) | No other active services.
• TLS/HTTP: No certificates or web services detected.
• Cloud Context: Part of Oracle Cloud infrastructure (likely a compute instance).

---

**4. Historical Observations**

• Stability: No significant changes in risk signals over the last 30 days.
• Consistency: Geolocation and network attributes remain stable.
• No Anomalies: No sudden spikes in traffic, scans, or threat indicators.

---

**5. Relationships & Neighbors**

• Linked Entities:

- Same network: 10+ IPs under Oracle Cloud (OOC-195).

- No direct ties to malicious domains, organizations, or subnets.

• Subnet Neighbors: None (single /32 address).

---

**6. Recommendations**

• Monitor: Track for unexpected service additions (e.g., HTTP, TLS) or port changes.
• Firewall: No immediate blocking required; no malicious activity detected.
• Context: Oracle Cloud instances are generally low-risk but should be validated against internal threat feeds.

Conclusion: Legitimate Oracle Cloud host with no current indicators of compromise. No action required unless new threats emerge.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.