Intelligence Briefing: 139.99.90.158/32
Classification
The IP address 139.99.90.158 was classified as Low Risk infrastructure with a risk score of 0. Operational intent was categorized as Legitimate Infrastructure, though the overall profile confidence remained Very Low.
Technical Details
Ownership was attributed to OVH Singapore PTE. LTD (ASN 16276) under the VPS-SGP2 network block (139.99.88.0/22). DNS forward resolution confirmed the hostname vps-2b7ac4eb.vps.ovh.ca. Active open ports included TCP 80 (HTTP) and TCP 22 (SSH). Email authentication records indicated the presence of SPF and DMARC configurations.
Threat Analysis
No threat indicators, known campaigns, or blacklist listings were observed. Behavioral analysis recorded zero honeypot hits, enumeration strikes, or WAF violations. Geolocation data presented contradictions, with sources disagreeing on country of origin (US, CA) despite a Singapore classification.
Recommendation
Due to signal contradictions present in the geolocation data, the recommended action was Monitor with a low severity rating. No firewall rules were generated.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | OVH Singapore PTE. LTD |
| ASN | AS16276 |
| Network Name | VPS-SGP2 |
| CIDR Block | 139.99.88.0/22 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | vps-2b7ac4eb.vps.ovh.ca |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | vps-2b7ac4eb.vps.ovh.ca |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Multi-Service Host |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 22 | ssh | tcp | |
| Closed Ports | 25, 443, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
| SSH Version | SSH-2.0-ROSSSH |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 50% | 2 | 3 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 35% | 2 | 2 |
| Overall | 28% | 8 | 10 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-23 07:41:00 UTC |
| Last Seen | 2026-09-23 07:41:00 UTC |
| Profile Built | 2026-09-23 07:57:07 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.