192.18.128.228
IP Intelligence Briefing: 192.18.128.228/32
Classification: Oracle Cloud Infrastructure – Low Risk
Date Generated: 2026-08-12
---
Executive Summary
IP 192.18.128.228 is identified as Oracle Corporation cloud infrastructure (ASN 31898, ORACLE-BRM4). The IP presents low-risk characteristics with a risk score of 0 and no open ports or active services detected. Geolocation data indicates US origin (California, San Jose region) with confidence.
Network Ownership & Infrastructure
- Organization: Oracle Corporation (ORACLE-BRM4)
- ASN: 31898
- CIDR Block: 192.18.128.0/20
- Infrastructure Type: Cloud (Oracle Cloud)
- RIR Registration: ARIN
- Contact: Abuse contact available via RDAP
Threat Assessment
- Risk Score: 0 (Low Risk)
- Operator Score: 0.1304 (Minimal)
- Blacklist Status: Not listed on any DNSBL (count: 0)
- Known Campaigns: None detected
- Abuse Confidence: Not applicable (cloud infrastructure)
Network Activity
- Open Ports: None detected
- DNS Resolution: No PTR records; forward resolution failed
- TLS/HTTP Services: No active services
- Banner/Service Identification: None detected
Neighborhood Analysis (192.18.128.228/24)
- Abuse Density: Low (1)
- Classification: Mostly clean
- Sibling Count: 1 active sibling
- Threat Siblings: 1 threat sibling identified in subnet
- Risk Distribution: Minimal threat indicators
Historical Observations
Analysis of 19 historical observations reveals consistent cloud infrastructure classification. No escalation in threat posture detected. Most recent signals (2026-08-12) confirm:
- Stable Oracle Cloud classification
- Consistent geolocation (US)
- No new threat indicators
- Persistent network role unchanged
Relationships
All 13 relationship links point to same network entity (ORACLE-BRM4), indicating no external associations with external hosts, organizations, or certificates.
Recommended Actions
No immediate blocking required. This IP represents legitimate Oracle Cloud infrastructure.
| Action | Recommendation |
|---|---|
| Firewall | Allow/monitor standard traffic; no block required |
| WAF Rules | No specific WAF rules needed |
| Monitoring | Standard cloud traffic monitoring |
| Reputation Checks | Not required (known provider IP) |
Intelligence Narrative
The IP 192.18.128.228/32 is a standard Oracle Cloud infrastructure address with no malicious indicators. The absence of open ports, combined with low operator score and zero blacklist listings, supports classification as benign cloud infrastructure. SOC analysts should treat this IP as legitimate Oracle services traffic. The single threat sibling in the /24 neighborhood warrants awareness but does not indicate direct compromise of this specific IP.
---
Status: Monitor | Confidence: High | Threat Level: Low
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Oracle Corporation |
| ASN | AS31898 |
| Network Name | ORACLE-BRM4 |
| CIDR Block | 192.18.0.0/17 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-27 15:46:33 UTC |
| Last Seen | 2026-08-12 21:36:06 UTC |
| Profile Built | 2026-08-12 21:41:16 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 21 |
Full dossier details are available via our API.