## IP Intelligence Briefing: 150.136.164.108
Classification: Low Risk / Oracle Public Cloud Infrastructure
Report Date: Current
---
Executive Summary
IP address 150.136.164.108 is a low-risk infrastructure address hosted within Oracle Public Cloud (ASN 31898). The IP demonstrates valid routing validation, minimal threat indicators, and no active malicious campaigns. Current risk score is 25 out of 100, indicating minimal concern for defensive monitoring.
---
Technical Profile
Ownership & Network:
- Organization: Oracle Public Cloud
- ASN: 31898 (ORACLE-BLD-1)
- CIDR Block: 150.136.0.0/16
- Network Name: OC-195
- Registry: ARIN
- Registration Date: 2011-03-21
Geolocation:
- Country: United States (US)
- Region: Virginia
- City: Ashburn
- GeoSource Consensus: Verified
Network Classification:
- Infrastructure Type: Cloud Hosting (isCloud: true)
- Service Role: Single-Service Host
- Not classified as: CDN, VPN, Proxy, Tor, or Residential
---
Threat Indicators
Risk Assessment:
- Overall Risk Score: 25/100 (Low Risk)
- Abuse Confidence Score: Not applicable (no active abuse detected)
- Blacklist Status: 1 DNSBL listing out of 8 total checks
- Known Campaigns: None
- Tor Exit Node: False
- Known Attacker: False
- Spam Source: False
Open Services:
- Port 22/TCP: SSH (OpenSSH 8.9p1 Ubuntu-3ubuntu0.16)
DNS Reputation:
- Forward Resolution: Not confirmed
- PTR Records: None
- Email Authentication: No SPF/DMARC records detected
---
Routing & Control Plane Validation
BGP Analysis:
- Origin ASN: 31898
- BGP Prefix: 150.136.0.0/16
- AS Path: 34549 β 1299 β 31898
- RPKI State: Valid (Route origin validated by local VRP)
- Route Stability: 1 change in last 30 days
- IRR Consistency: Valid
---
Neighborhood Analysis
Subnet Context (150.136.164.0/24):
- Abuse Density: 0 (Clean)
- Neighbor Count: 0 (isolated endpoint)
- Risk Distribution: All low-risk
- Threat Siblings: 1 detected in broader Oracle network
---
Historical Observations
Signal History (24 total observations):
- Recent observations confirm valid RPKI route validation
- ASN has maintained consistent allocation since 2011
- Route origin validation remains valid with ARIN trust anchor
- No persistent malicious behavior detected
- Threat observation count: 1
---
Defensive Recommendations
Action Score: 25/100
Recommended Actions:
- No immediate firewall restrictions required
- Standard Oracle Cloud traffic allowed
- Monitor for any unexpected service changes
- No blocking actions recommended based on current risk profile
Firewall Rules: Not applicable (no active threats)
---
Intelligence Narrative
IP 150.136.164.108 represents legitimate Oracle Public Cloud infrastructure deployed in Ashburn, Virginia. The address shows standard cloud hosting characteristics with SSH service exposure, which is typical for cloud management interfaces. Routing validation is complete and valid via RPKI, confirming the address is properly announced within Oracle's BGP infrastructure. No malicious indicators, threat feeds, or known campaign associations were identified. The low risk score of 25 reflects the infrastructure's reputation as a legitimate cloud service rather than a malicious actor.
SOC Analyst Guidance: Treat as trusted infrastructure. No immediate action required. Continue standard monitoring practices for Oracle Cloud traffic patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Oracle Public Cloud |
| ASN | AS31898 |
| Network Name | OC-195 |
| CIDR Block | 150.136.0.0/16 |
| RIR | APNIC |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16 |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 38% | 3 | 4 |
| services | 24% | 2 | 2 |
| ownership | 38% | 3 | 4 |
| reputation | 28% | 1 | 3 |
| geolocation | 17% | 1 | 1 |
| Overall | 30% | 12 | 18 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-01 01:41:37 UTC |
| Last Seen | 2026-08-13 02:04:44 UTC |
| Profile Built | 2026-08-13 02:21:50 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 26 |
Full dossier details are available via our API.