145.239.2.82📋 Copy

IP Intelligence Briefing: 145.239.2.82

Classification: Moderate Risk Hosting Infrastructure

Date: August 2026

Status: Active

---

**EXECUTIVE SUMMARY**

IP 145.239.2.82 is a hosting infrastructure endpoint associated with OVH GmbH in Frankfurt, Germany. The IP presents moderate risk (Score: 55) with evidence of DNSBL listings and hosting configuration. No active threat indicators detected at the time of analysis.

---

**OWNERSHIP & INFRASTRUCTURE**

• Organization: OVH GmbH (ASN 16276)
• Network: OVH-DEDICATED (145.239.0.0/22)
• Geolocation: Frankfurt am Main, Hesse, Germany (DE)
• Infrastructure Type: Cloud Hosting Provider
• Registration: RIR RIPE, IPv4 allocation

---

**THREAT ASSESSMENT**

• Risk Score: 55/100 (Moderate)
• Threat Indicators: None detected
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0 active lists
• DNSBL Listings: 3 of 8 total lists
• Campaign Association: None detected

Key Findings:

• IP is listed on 3 DNS blacklists, suggesting historical abuse or reputation issues
• Route stability flagged as unstable (isRouteStable: false)
• Abuse confidence score not available

---

**NETWORK SERVICES**

• Server Banner: openresty
• Email DNS: mail.juri.verai.fr
• Email Security: SPF present, DMARC not configured

---

**OBSERVATION HISTORY**

• Total Observations: 25 signals
• Recent Activity: August 2026
• Threat Persistence: 0 days (not persistently malicious)
• Notable Signals:

- Connection failures observed on August 6, 2026

- DNS and routing signals detected consistently

- No escalation in threat posture over observation period

---

**RELATIONSHIP ANALYSIS**

• DNS Associations: mail.juri.verai.fr (repeated associations)
• Network Associations: OVH-DEDICATED subnet
• External Entities: No external organization or certificate relationships detected
• Subnet Classification: Mostly clean (Inherited Risk: 2)

---

**NEIGHBORHOOD ASSESSMENT**

• Subnet: 145.239.2.82/24
• Neighbor Count: 0
• Abuse Density: 0
• Threat Siblings: 1 (within /24)
• Classification: Mostly clean

---

**RECOMMENDED ACTIONS**

SOC/Network Defenders:

1. Monitor DNSBL status - IP appears on 3 of 8 blacklist feeds; verify current listing status

2. Review mail.juri.verai.fr - Verify legitimate email server operation; consider DMARC implementation

3. SSH exposure - Port 22 is open; assess if this endpoint requires SSH access from external networks

4. Route stability - Monitor BGP announcements for 145.239.0.0/16 prefix

5. Baseline behavior - No immediate blocking recommended; maintain monitoring for behavioral changes

Firewall/Edge Configuration:

• No immediate blocking actions recommended
• Consider rate limiting for SSH if access is not required
• Monitor for unusual outbound connections from this endpoint

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.