140.245.201.77📋 Copy

# IP Intelligence Briefing: 140.245.201.77/32

Classification: Cloud Infrastructure / Moderate Risk (Score: 50)

## Executive Summary

IP 140.245.201.77 is an Oracle Cloud infrastructure address located in New York, US. The IP exhibits a moderate risk profile (score 50) primarily driven by DNSBL listings rather than active malicious behavior. No open services are detected, and the subnet shows minimal abuse density. Recommended action is monitoring with optional blocking pending additional context.

## Infrastructure Profile

• Owner/Provider: Oracle Corporation (ASN 31898)
• Geolocation: New York, US (US-NY)
• CIDR Block: 140.245.192.0/18
• Registration Date: 2022-09-07
• Network Role: Cloud Infrastructure / Firewalled
• Infrastructure Type: Unknown

## Threat Assessment

Risk Score: 50/100 (Moderate)

Threat Indicators:

• DNSBL Listed: 2 of 8 total lists
• Max Severity: High (from blacklist feeds)
• No known attacker indicators
• Not a Tor exit node
• No spam source activity detected
• No active campaigns correlated

Service Exposure: No open ports detected. IP is described as "Firewalled / No Services" with zero open ports, no TLS certificates, and no HTTP services.

## Observational History

Nine signal observations recorded as of 2026-07-29. Recent signals confirm:

• DNSSEC validation: Valid
• ASN resolution: ORACLE-BMC-31898 (Oracle Corporation, US)
• PTR record: Absent
• Blacklist activity: 2 listings with high severity

No ownership changes or persistent threat patterns observed.

## Network Relationships

• Related Entities: None identified
• Subnet Analysis: 140.245.201.0/24 shows zero active siblings and zero abuse density
• Control Plane: Route stability flagged as false; 30-hop traceroute via Comcast with 13 timed-out hops

## Recommended Security Actions

The risk profile warrants defensive consideration:

Note: These recommendations are probabilistic. Given the IP is Oracle Cloud infrastructure with no active service exposure, blocking should be evaluated against business requirements and verified against internal threat intelligence before deployment.

## Analyst Notes

This IP represents typical Oracle Cloud infrastructure behavior. The moderate risk score is primarily blacklist-driven rather than behavior-based. The absence of open services and neighbors suggests this is likely a passive or internal cloud address. Monitor for changes in service exposure or increased blacklist activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.