## IP Intelligence Briefing: 137.74.145.29/32
Date: 2026-08-12
Analyst Classification: Defensive Security Intelligence
Subject: OVH Cloud Compute Infrastructure Assessment
Executive Summary
IP 137.74.145.29 is a low-risk cloud compute endpoint hosted on OVH infrastructure in France. The asset presents minimal immediate threat indicators but requires monitoring due to DNSBL listing and route stability anomalies.
Threat Profile
Risk Score: 25 (Low Risk)
Reputation Assessment: Low Risk
Abuse Confidence: Not elevated
Classification:
- Infrastructure Type: CloudCompute
- Hosting Provider: OVH (ASN 16276)
- Network: OVH_287546843
- CIDR Block: 137.74.145.16/28
Geolocation & Network Context
Location: France (FR)
Coordinates: 46.23°N, 2.21°E (inference confidence: 52%)
Timezone: Europe/Paris
Network Stability: Route stability flagged as false; routing inconsistencies observed in control plane data.
DNS Resolution: ip29.ip-137-74-145.eu (forward confirmed)
Service Exposure
Open Ports:
- TCP/22 (SSH): Open
- Banner: SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.13
No web services or TLS certificates detected.
Threat Indicators
Malicious Activity: None observed
Blacklist Status: Listed on 1 of 8 DNSBL checks
Known Campaigns: No associations
Tor Exit: No
Known Attacker: No
Spam Source: No
Operator Score: Basic (0.2609)
Neighborhood Analysis
Subnet: 137.74.145.0/24
Abuse Density: 0 (low)
Threat Siblings: 1
Classification: Mostly clean
Historical Signal Analysis
Observation Count: 22 signals
Last Observed: 2026-08-12
Signal timeline shows consistent geolocation to France with OVH provider identification. No escalation in threat signals over observation period.
Recommended Actions
Current Risk Level: Low
Recommended Action: Monitor
The IP address presents minimal immediate risk. No blocking action recommended at this time. However, the following conditions warrant attention:
1. Route stability anomalies detected in BGP control plane
2. Single DNSBL listing present
3. SSH service exposed on standard port
Intelligence Notes
This endpoint operates within OVH's cloud infrastructure with standard residential hosting classification. The single threat indicator (DNSBL listing) requires correlation with additional threat feeds before escalation. No campaign associations or correlated malicious activity detected.
Classification: Defensive monitoring required; no immediate containment action necessary.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Tuncer Mahmut |
| ASN | AS16276 |
| Network Name | OVH_287546843 |
| CIDR Block | 137.74.145.16/28 |
| RIR | ARIN |
| Country | FR |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | ip29.ip-137-74-145.eu |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | ip29.ip-137-74-145.eu |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.13 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 24% | 1 | 3 |
| geolocation | 13% | 1 | 1 |
| Overall | 22% | 9 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-23 20:04:56 UTC |
| Last Seen | 2026-08-12 17:53:39 UTC |
| Profile Built | 2026-08-12 18:03:11 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.