168.110.116.95📋 Copy

# IP Intelligence Briefing: 168.110.116.95

## Executive Summary

Intellect analysis of IP 168.110.116.95 indicates a low-risk Oracle Cloud infrastructure endpoint with minimal threat indicators. The address operates as a standard web server within Oracle's CloudCompute network (ASN 31898, ORACLE-4).

## Infrastructure Profile

The IP belongs to Oracle Corporation's cloud infrastructure, registered under CIDR block 168.110.0.0/16. Network classification confirms cloud hosting infrastructure with openresty server software serving HTTP (port 80) and HTTPS (port 443) traffic. Geolocation data indicates US-based deployment with geolocation consensus across two sources.

## Risk Assessment

Current risk score stands at 25, classified as Low Risk. The address maintains zero known attacker status, zero spam source designation, and zero Tor exit node classification. Blacklist count remains at zero, with DNSBL listing count of 1 out of 8 total lists checked. Operator score registers at 0.1304 (Minimal risk level).

## Threat Intelligence

No active threat indicators detected. Known campaigns list remains empty. The IP is not flagged as a known attacker, spam source, or Tor exit node. Historical observation count shows 21 total signals across multiple observation periods.

## Temporal Analysis

Ownership changes recorded at zero over the observation period. Threat persistence days at zero with one total threat observation recorded. The IP is not classified as persistently malicious. Recent observations from 2026-06-21 confirm consistent cloud infrastructure classification without changes to network role or service profile.

## Neighborhood Context

The /24 subnet (168.110.116.0.0/24) demonstrates abuse density of 1 with classification as "mostly_clean." One threat sibling identified within the subnet, though neighbor count registers at zero. Risk distribution shows low-risk classification for the subnet.

## Control Plane Data

BGP prefix 168.110.96.0/19 associated with ASN 31898. Route stability flag indicates false status with zero route changes over 30-day period. DNSSEC validation confirmed as valid. RPKI state and IRR consistency data available via RDAP contact channel.

## Recommended Actions

Given the low-risk profile and legitimate cloud infrastructure classification, standard network monitoring is appropriate. No firewall blocking recommended. The IP presents no immediate security concerns for inbound or outbound traffic analysis.

---

*Intellect Report Generated: 2026-06-26*

*Classification: Operational Intelligence*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.