161.118.221.49📋 Copy

IP Intelligence Briefing: 161.118.221.49

Date: 2026-06-14

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Oracle Corporation (ASN 31898)
• Geolocation: Singapore (SG), Loyang; geo-plausible with 1500km accuracy radius.
• Network Role: Oracle Cloud infrastructure (CloudCompute, Hosting).
• Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).
• Control Plane:

- BGP prefix: `161.118.192.0/18`

- DNSSEC valid, CAA records present, 1 DNSBL listing.

- Route stability: Unstable (route changes in last 30 days).

---

**2. Observation History**

• Latest Activity: June 14, 2026 (CloudCompute infrastructure detection).
• Geolocation Validation: ICMP blocked, but geo-plausible (10,383.8km from probe).
• Temporal Trends: No persistent threats; observed once in last 30 days.

---

**3. Network Relationships**

• Subnet: `161.118.221.49/24`
• Key Relationships:

- Linked to Oracle Cloud network blocks (`ORACLEV6-AP`).

- No direct connections to known malicious entities.

• Subnet Abuse Density: 0.5 (mostly clean, but 1 threat sibling in subnet).

---

**4. Neighborhood Analysis**

• Subnet: `161.118.221.49/24`
• Neighbor Risk:

- `161.118.221.25`: Risk score 25 (low, but higher than the main IP).

• Subnet Classification: "Mostly clean" with inherited risk score 2.

---

**5. Recommendations**

• Monitoring: Track subnet for anomalies, as 1 neighbor shows elevated risk.
• Firewall: No immediate blocking required for this IP, but consider monitoring Oracle Cloud infrastructure traffic.
• Context: Verify if the subnet’s abuse density correlates with broader Oracle Cloud infrastructure activity.

SOC Analyst Note: This IP is part of Oracle’s cloud infrastructure and shows no direct malicious signals. However, the subnet’s mixed risk profile warrants closer scrutiny of neighboring IPs for potential indirect threats.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.