141.227.152.213📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 141.227.152.213/32

Date: 2026-06-20

Classification: LOW RISK / MONITORING

---

## EXECUTIVE SUMMARY

IP 141.227.152.213 is a low-risk cloud infrastructure address hosted on OVH BV (ASN 16276) in the Netherlands. Current risk score is 25/100 with no active threat indicators. The address operates as a firewalled VPS with no open services and has a clean reputation profile.

---

## PROFILE ANALYSIS

Ownership & Infrastructure

• Provider: OVH BV (ASN 16276)
• Network: 141.227.152.0/24
• Infrastructure Type: CloudCompute (VPS)
• Classification: Firewalled / No Services

Geolocation

• Country: Netherlands (NL)
• Region: Europe/Amsterdam timezone
• Coordinates: 49.38°N, 3.85°E
• Accuracy Radius: 313 km

DNS Resolution

• PTR Hostname: vps-9a4040cd.vps.ovh.net
• Forward Resolution: Confirmed
• Email Auth: SPF and DMARC records present

---

## THREAT ASSESSMENT

Risk Indicators

• Overall Risk Score: 25/100 (Low)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• DNSBL Listings: 1 of 8 checks
• Known Campaigns: None
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No

Network Role Flags

• Cloud Infrastructure: Yes
• CDN: No
• VPN: No
• Proxy: No
• Hosting Provider: Yes (OVH)

Control Plane

• Origin ASN: 16276
• BGP Prefix: 141.227.152.0/24
• Route Stability: Stable (0 changes in 30 days)
• RPKI State: Valid
• DNSSEC: Valid

---

## OBSERVATION HISTORY

Signal Count: 23 observations

Most Recent: 2026-06-20T09:28:26 UTC

Key Historical Signals:

• 2026-06-20: Provider classification (OVH) confirmed, cloud infrastructure verified
• 2026-06-20: Geolocation inference (Netherlands, Amsterdam)
• 2026-06-20: Operator score: 0.4783 (Basic)
• 2026-06-09: Subnet neighborhood analysis (abuse density: 1, mostly clean)

Temporal Analysis: No persistent malicious activity detected. Ownership changes: 0.

---

## RELATIONSHIP MAPPING

DNS Associations: vps-9a4040cd.vps.ovh.net (42 relationship entries)

Network Association: VPS-LZ-AMS (OVH Amsterdam datacenter)

Correlated Entities: 42 total relationships identified

---

## NEIGHBORHOOD ANALYSIS

Subnet: 141.227.152.0/24

• Abuse Density: 1 (Low)
• Classification: Mostly Clean
• Threat Siblings: 1
• Active Siblings: 0
• Inherited Risk Score: 2

---

## SECURITY ACTIONS

Current Risk Level: LOW

• No immediate firewall rules required
• No specific mitigation recommendations
• Standard monitoring recommended

Recommended Actions:

• Continue passive monitoring
• No blocking required at current risk level
• Review if additional threat intelligence emerges

---

## ASSESSMENT

IP 141.227.152.213 represents standard cloud infrastructure from OVH with no observable malicious activity. The address is properly classified, geolocated to Amsterdam, and maintains a clean threat profile. The single threat sibling in the /24 subnet warrants periodic neighborhood monitoring but does not elevate this specific IP's risk profile.

Confidence: High (23 observations, 42 relationships, stable routing)

SOC Recommendation: Monitor passively; no immediate action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.