193.123.92.51📋 Copy

# IP Intelligence Briefing: 193.123.92.51/32

Classification: Low Risk | Risk Score: 25 | Status: Cloud Infrastructure

## Executive Summary

IP 193.123.92.51 is a low-risk Oracle Cloud Compute instance associated with ASN 31898 (Oracle Corporation). The IP presents as legitimate cloud hosting infrastructure with no active malicious indicators. Monitoring recommended due to cloud environment characteristics and minimal route stability.

## Ownership and Network Classification

• Organization: Oracle Corporation
• ASN: 31898
• Infrastructure Type: CloudCompute (Oracle Cloud)
• CIDR Block: 193.123.64.0/19
• Geolocation: Dubai, US (5,063 km from probe origin; RTT: 195-210ms)
• Network Role: Multi-Service Host (Cloud hosting provider)

## Services and Port Exposure

• HTTP (80/TCP): Caddy web server, HTTP/1.1, 200 OK status
• SSH (22/TCP): OpenSSH_10.0p2 Debian-7
• TLS: No certificate present
• DNSSEC: Valid
• CAA Records: Present

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Blacklist Count: 0 active listings
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Abuse Confidence Score: Not applicable (low-risk profile)
• DNSBL Listings: 1 out of 8 total lists (minimal impact)

## Control Plane Analysis

• BGP Prefix: 193.123.64.0/19
• Route Stability: Unstable (isRouteStable: false)
• Route Changes (30d): 0
• Operator Score: 0.2174 (Minimal)
• RPKI/Irr: Data not populated

## Observation History (26 Observations)

• Latest Signal: June 28, 2026
• Threat Persistence: 0 days
• Ownership Changes: 0
• Signal Consistency: Minimal operator score (0) across observations
• HTTP Fingerprint: Consistent Caddy server identification

## Neighborhood Analysis (193.123.92.0/24)

• Abuse Density: 1
• Subnet Classification: mostly_clean
• Active Siblings: 1
• Threat Siblings: 1
• Inherited Risk: 2

## Entity Relationships

• Primary Association: Same Network (OC-195) - multiple occurrences
• DNS Associations: Timeout errors to internal IP 192.168.2.108#53 (internal network reference)

## Recommended Security Actions

Current Risk Level: LOW — No immediate blocking required.

Recommended Monitoring:

1. Passive Monitoring: Continue passive observation; no active threat signals detected

2. Traffic Analysis: Monitor for anomalous outbound connections from this cloud instance

3. SSH Exposure: Note SSH port 22 is open; evaluate if SSH access from this IP to internal systems is expected

4. Route Stability: Investigate route instability (isRouteStable: false) — may indicate cloud migration or peering changes

No Firewall Rules Recommended — Risk score 25 falls below action threshold.

---

Intel Confidence: HIGH — Data sufficient for operational decisions

Last Updated: June 2026

Data Sources: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.