IPDebrief

79.72.91.88

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## IP Intelligence Briefing: 79.72.91.88/32

Classification: Low Risk / Oracle Cloud Infrastructure

IP Overview

The IP address 79.72.91.88 belongs to Oracle Cloud (ASN 31898) and is geolocated to Belfast, Northern Ireland (GB). Risk assessment returned a score of 25/100, indicating low risk. The IP is classified as firewalled with no active services detected, no open ports, and no TLS certificates.

Network Characteristics

Threat Assessment

The IP shows no threat indicators. No known campaigns, no blacklist entries, and not identified as a Tor exit node, VPN, proxy, or spam source. The abuse confidence score was not populated, and known attacker flags remained negative. Only one DNSBL listing was detected across 8 total checks.

Observation History

Analysis of 23 signal observations revealed consistent Oracle Cloud infrastructure classification. Recent observations from June 26, 2026, confirmed provider identity and geolocation. One historical observation from alienvault-otx noted AS9105 (TalkTalk Communications) association, though current attribution points to Oracle Cloud. The IP is not classified as persistently malicious, with zero threat observation persistence days.

Infrastructure Relationships

The IP maintains 31 relationship entries, all identifying connections to the network "SE-ORACLE-SE-20070619," confirming Oracle Cloud infrastructure placement. No anomalous relationships detected.

Neighborhood Analysis

The /24 subnet (79.72.91.88/24) contains one active sibling IP. Subnet classification is "mostly clean" with an abuse density score of 1. No high or medium-risk neighbors were identified.

Recommended Actions

Based on the low-risk profile and Oracle Cloud infrastructure classification, standard cloud provider monitoring applies. No blocking or firewall rules are recommended at this time. The IP may be whitelisted for legitimate Oracle Cloud traffic.

Status: No immediate action required. Monitor as standard Oracle Cloud infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฌ๐Ÿ‡ง United Kingdom
RegionNIR
CityBelfast
TimezoneEurope/London
Latitude51.52
Longitude-0.62

๐Ÿข Ownership & Registration

OrganizationORCL-MNT
ASNAS31898
Network Nameโ€”
CIDR Block79.72.64.0/19
RIRRIPE
Countryโ€”
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierUnknown โ€” Insufficient routing data to classify
No specific classification

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
24
routing
17%
23
services
12%
22
ownership
22%
34
reputation
24%
13
geolocation
31%
23
Overall22%1219
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-11 15:05:42 UTC
Last Seen2026-06-27 19:48:33 UTC
Profile Built2026-06-28 13:53:24 UTC
Data FreshnessLive
Signal Types23
Total Observations27
๐Ÿ” 23 signal types ยท 27 observations collected
This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.