193.123.245.198📋 Copy

# IP Intelligence Briefing: 193.123.245.198/32

## Executive Summary

IP address 193.123.245.198 was classified as Moderate Risk (risk score: 40) during analysis on 2026-06-17. The IP is registered to Oracle Corporation (ASN 31898) and operates within Oracle Cloud infrastructure. No open services were detected, and the address is not flagged as a known attacker, Tor exit node, or spam source.

## Technical Profile

Ownership & Infrastructure

• Organization: Oracle Corporation
• ASN: AS31898
• Network Role: Cloud Compute / Hosting infrastructure
• CIDR Block: 193.123.224.0/19

Geolocation

• Country: US (with inconsistent geolocation consensus)
• City: Seoul, KR (per AlienVault OTX)
• Geoconsensus: Not unified across sources

Network Classification

• Cloud Provider: Oracle Cloud
• Infrastructure Type: CloudCompute
• Connection Type: Firewalled / No Services Detected
• DNS Resolution: Not confirmed forward-resolvable
• Open Ports: None detected

## Threat Indicators

Current Threat Status

• Blacklist Count: 0 (current profile)
• Known Campaigns: None
• Is Known Attacker: No
• Is Spammer: No
• Abuse Confidence Score: Not available

Signal History

• Total Observations: 19 (as of 2026-06-17)
• Threat Persistence: 0 days
• Not Persistently Malicious
• Recent observations indicate 8 DNSBL listings with 2 currently active
• Maximum severity observed: High
• Control plane shows route instability (non-MoAS)

## Network Context

Subnet Analysis (193.123.245.0/24)

• Abuse Density: Low (1)
• Classification: Mostly clean
• Total Siblings: 1 active
• Inherited Risk: 2
• High/Medium/Low Risk Neighbors: 0

Relationships

• 25 identified relationships, all pointing to network identifier OC-195
• Indicates placement within Oracle's cloud infrastructure ecosystem

## Risk Assessment

The IP presents moderate risk primarily due to:

1. Cloud hosting infrastructure designation

2. DNSBL listings (8 total lists)

3. Geolocation consensus inconsistencies

4. Route instability in control plane data

However, no direct threat indicators were observed (no known attacks, campaigns, or spam activity). The IP operates within Oracle Cloud infrastructure, which may explain the moderate risk classification.

## Recommended Actions

Firewall Rules

• `iptables -A INPUT -s 193.123.245.198 -j DROP`
• `nft add rule inet filter input ip saddr 193.123.245.198 drop`
• `nginx deny 193.123.245.198;`
• `pfsense: 193.123.245.198/32`

Cloud Security

• Cloudflare WAF: Block IP with expression `ip.src eq 193.123.245.198`
• AWS WAF: Add address `193.123.245.198/32` to rule group

Mitigation Notes

These rules are probabilistic and should be combined with other signals before taking action. The IP's moderate risk score warrants monitoring but does not indicate confirmed malicious activity.

---

*Intelligence generated from IPDebrief platform. Data current as of 2026-06-17.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.