145.239.74.181📋 Copy

# IP Intelligence Briefing: 145.239.74.181/32

Classification: Moderate Risk (Score: 40)

Date: 2026-08-13

## Executive Summary

IP 145.239.74.181 is an OVH SAS cloud compute host located in France. The IP presents moderate risk with multiple DNSBL listings and is hosted on a VPS infrastructure with elevated neighborhood abuse density (0.6667).

## Infrastructure Profile

• Organization: OVH SAS (ASN 16276)
• Network: VPS-GRA2, 145.239.72.0/21
• Geolocation: France
• Infrastructure Type: Cloud Compute / Hosting
• DNS Resolution: vps-48825ca8.vps.ovh.net

## Service Exposure

• Open Ports: TCP/80 (HTTP), TCP/443 (HTTPS), TCP/22 (SSH)
• Web Server: nginx/1.28.3 (Ubuntu)
• TLS Certificate: enotesinptic.online (Let's Encrypt)
• HTTP Headers: HSTS not configured; CSP missing

## Threat Indicators

• DNSBL Listings: Listed on 2 of 8 threat feeds (high severity)
• Abuse Confidence Score: Present
• Risk Breakdown: Provider and authority scores: 0

## Neighborhood Context

The /24 subnet (145.239.74.0/24) shows:

• Abuse Density: 0.6667
• Classification: mostly_clean
• Active Siblings: 3 total, 2 identified as threats
• Notable Neighbors:

- 145.239.74.189 (Risk: 25)

- 145.239.74.160 (Risk: 0)

## Historical Observations

• 25 total observations recorded
• Recent DNSBL listing activity detected with high severity
• SPF record present (includes:mx.ovh.com -all)
• DMARC record not configured
• No HSTS implementation

## Recommended Actions

Based on the risk profile, the following blocking rules are recommended:

## Assessment

The IP exhibits characteristics of a compromised VPS hosting infrastructure. Multiple DNSBL listings and the presence of threat sibling IPs within the same /24 suggest this host may be involved in malicious activity. The moderate risk score (40) warrants blocking in defensive environments. Monitor the subnet 145.239.74.0/24 for additional compromise indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.