144.22.165.206📋 Copy

# IP Intelligence Briefing: 144.22.165.206

## Executive Summary

IP 144.22.165.206 is a moderate-risk address (Score: 55) assigned to Oracle Corporation's cloud infrastructure in São Paulo, Brazil. The endpoint hosts a web service for mogatelecom.com.br with no evidence of active malicious activity. Minor reputation concerns stem from DNSBL listings on 3 of 8 threat feeds.

## Infrastructure Profile

## Network Services

• Port 80/443 (TCP): HTTP/HTTPS services operational
• Port 22 (TCP): SSH service (OpenSSH_8.4p1 Debian)
• TLS Certificate: CloudFlare Origin SSL for mogatelecom.com.br
• Server Software: Apache/2.4.67 (Debian)

## Threat Assessment

• Risk Score: 55/100 (Moderate Risk)
• Abuse Confidence: Not elevated
• Known Attacker: No
• Tor Exit Node: No
• DNSBL Status: Listed on 3 of 8 threat feeds (operator score: 0.1304)
• Threat Persistence: None detected (0 threat observation days)

## Historical Activity

Observation history from August 2026 indicates stable behavior with consistent HTTP/HTTPS responses. No escalation in risk posture or emergence of new threat indicators over the monitoring period.

## Neighborhood Analysis

• Subnet Abuse Density: 0% (Clean)
• Neighboring Threats: 0 high/medium risk IPs detected in /24
• Correlated IPs: None identified

## Relationship Graph

The IP maintains network-level relationships solely to the Oracle 144.22.128.0/17 block. No associations with external malicious entities or command-and-control infrastructure.

## Recommended Actions

1. Monitor: Continue passive monitoring given the moderate risk score and DNSBL listings

2. Contextualize: The IP serves legitimate cloud infrastructure; false-positive risk exists

3. Threat Intel: No immediate blocking required unless specific IOCs match

## Conclusion

144.22.165.206 represents Oracle Cloud infrastructure hosting a commercial web service. The moderate risk classification is primarily driven by DNSBL listings rather than confirmed malicious activity. The subnet shows clean neighborhood behavior with no inherited risk. This IP may appear in threat feeds due to false positives or unrelated reputation factors.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.