145.239.64.13📋 Copy

## Intelligence Briefing: IP 145.239.64.13/32

Classification: LOW RISK | Status: Passive Monitoring | Date: 2026-08-12

Summary

Target IP 145.239.64.13 is a cloud-hosted infrastructure asset belonging to OVH SAS (ASN 16276) with a risk score of 25 (Low Risk). The IP resolves to a WordPress-based web presence hosted on OVH's SD-GRA2 network in France. No active threat indicators or malicious activity observed.

Infrastructure Profile

Network Services & Application Layer

• Open Ports: 80/tcp (HTTP), 443/tcp (HTTPS), 8443/tcp (HTTPS-ALT)
• Web Server: nginx (HTTP/2 enabled)
• Application Stack: PHP 8.2.33
• TLS Certificate: Let's Encrypt (CN=hopeful-williamson.145-239-64-13.plesk.page)
• Security Headers: HSTS disabled, CSP not implemented

Domain & Email Infrastructure

• Primary Domain: restauranteambivium.com
• DNS Records: SPF configured (v=spf1 include:spf.protection.outlook.com -all)
• DMARC Policy: Not configured
• Hosted Domains: 0
• PTR Record: ns3085904.ip-145-239-64.eu

Threat Intelligence Assessment

• Abuse Confidence Score: Not applicable (clean classification)
• Blacklist Status: Listed on 1 of 8 DNSBLs (low-severity listing)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Feeds: No correlated campaigns detected
• Control Plane: Route stability inconsistent; DNSSEC valid

Observation History (26 signals)

Recent observations from 2026-08-12 indicate:

• WordPress administrative interface access patterns (wp-admin, admin-ajax.php)
• XML sitemap generation (wp-sitemap.xml)
• Consistent HTTP/2 protocol usage
• Average Time to First Byte: 1246ms
• No persistent malicious behavior observed over monitoring period

Neighborhood Analysis

• Subnet: 145.239.64.0/24
• Abuse Density: 0%
• Classification: Clean
• Threat Siblings: 0 detected
• Active Siblings: 1 (target IP only)

Recommended Security Actions

No immediate blocking or filtering actions recommended. The IP presents a standard cloud-hosted web server profile with legitimate commercial hosting characteristics.

Intelligence Notes

This IP belongs to a residential/business cloud hosting environment (OVH). The WordPress stack and Plesk page hosting suggest small-to-medium enterprise web presence. SPF configuration is present but DMARC is absent, indicating suboptimal email authentication posture. The single low-severity DNSBL listing warrants monitoring but does not warrant immediate action. No evidence of compromise or abuse activity observed.

---

*Intel produced from IPDebrief threat intelligence platform. Data sourced from passive network monitoring and reputation feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.