141.94.26.113
INTELLIGENCE BRIEFING: IP 141.94.26.113/32
Classification: Low Risk | Report Date: 2026-08-12
---
EXECUTIVE SUMMARY
IP 141.94.26.113 is a cloud-compute VPS endpoint operated by OVH SAS (ASN 16276) with an overall risk score of 25/100. The address resolved to a standard web hosting infrastructure in France and demonstrated no active malicious behavior. No security actions were required.
---
INFRASTRUCTURE PROFILE
- Organization: OVH SAS (ASN 16276)
- Network Block: 141.94.26.0/23 (VPS-GRA8)
- Location: France (Europe/Paris timezone)
- Infrastructure Type: CloudCompute / Hosting
- Classification: Clean subnet with zero abuse density
NETWORK SERVICES
- Port 22: SSH (OpenSSH_8.3p1 Ubuntu-1ubuntu0.1)
- Port 80: HTTP (Apache/2.4.46)
- Port 443: HTTPS (TLS 1.3, AES-256-GCM-SHA384)
- Certificate: Let's Encrypt (app.marbellamaintenance.es)
- HTTP Status: 403 Forbidden (observed in recent scans)
DNS RESOLUTION
- PTR Record: vps-d3f0d651.vps.ovh.net
- Forward Resolution: Confirmed (1 hostname)
- DNSSEC: Valid
- DNSBL Status: Listed on 1 of 8 threat feeds
THREAT INDICATORS
- Blacklist Count: 0
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Campaign Activity: None detected
- Abuse Confidence Score: Not applicable
TEMPORAL ANALYSIS
- Observations: 23 total signals collected
- Last Activity: 2026-08-12
- Threat Persistence: None observed
- Ownership Stability: No changes detected
- Route Stability: Unstable (0 route changes in 30 days)
NEIGHBORHOOD INTELLIGENCE
- Subnet: 141.94.26.113/24
- Abuse Density: 0%
- Threat Siblings: 0
- Active Siblings: 0
RELATIONSHIP MAPPING
- Primary Association: vps-d3f0d651.vps.ovh.net (DNS hostname)
- Network Links: VPS-GRA8 (multiple same-network relationships)
- No correlated malicious entities detected
ANALYST ASSESSMENT
The target IP presents a low-risk profile consistent with legitimate cloud hosting operations. The endpoint maintains proper TLS encryption, standard web server configurations, and exhibits no indicators of compromise. The 403 Forbidden response observed during HTTP scanning suggests proper access control measures are in place. No firewall rules or blocking actions are recommended at this time.
Recommendation: Monitor as passive traffic. No immediate action required.
---
*Intelligence generated from IPDebrief threat intelligence platform. Data accurate as of 2026-08-12.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | OVH SAS |
| ASN | AS16276 |
| Network Name | VPS-GRA8 |
| CIDR Block | 141.94.26.0/23 |
| RIR | RIPE |
| Country | FR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vps-d3f0d651.vps.ovh.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | vps-d3f0d651.vps.ovh.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Apache/2.4.46 (Ubuntu) |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_8.3p1 Ubuntu-1ubuntu0.1 |
🔐 TLS Certificate
| SANs | app.marbellamaintenance.es |
| Valid From | 2026-07-28T00:02:39+00:00 |
| Valid Until | 2026-10-26T00:02:38+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 06C8DFEE931694BB21183756B6E9125113AA |
| Thumbprint | 0B4EA08EBF4142E4BAF313246A3392625C2BCBD6 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 35% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 40% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-21 12:54:46 UTC |
| Last Seen | 2026-08-12 15:48:59 UTC |
| Profile Built | 2026-08-12 15:57:20 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.