145.239.74.189📋 Copy

# IP Intelligence Briefing: 145.239.74.189

Date: 2026-08-12

Classification: Low Risk / Cloud Infrastructure

Risk Score: 25/100

## Executive Summary

IP address 145.239.74.189 was analyzed and classified as a low-risk residential cloud hosting endpoint. The address belongs to OVH SAS infrastructure and shows no active malicious indicators. No immediate defensive action required based on current risk profile.

## Ownership and Network Context

The address is registered to OVH SAS (ASN 16276), operating within the VPS-GRA2 network block (145.239.72.0/21). Geolocation analysis indicates deployment in France with Europe/Paris timezone. The infrastructure type is confirmed as cloud compute hosting. DNS resolution maps to vps-716bff3a.vps.ovh.net, consistent with standard OVH VPS addressing conventions.

## Threat Assessment

Current threat indicators show no evidence of malicious activity. The IP is not associated with known attacker campaigns, spam sources, or Tor/VPN/proxy infrastructure. Blacklist analysis returned zero entries across monitored feeds. The abuse confidence score is null, and Pulsedive risk assessment did not flag the address. Control plane analysis shows valid DNSSEC configuration and basic operator classification (score 0.2609).

## Neighborhood Analysis

The /24 subnet (145.239.74.0/24) contains three active sibling IPs with one identified threat sibling. Subnet abuse density registers at 0.3333, classified as "mostly_clean." Neighboring addresses include 145.239.74.160 (risk score 0) and 145.239.74.181 (risk score 50), indicating mixed-risk environment typical of shared cloud hosting.

## Historical Signals

Twenty-five observations were recorded. Recent signals from 2026-08-12 confirm consistent cloud hosting classification, France geolocation, and stable network classification. No significant risk escalation patterns detected in observation history. The IP is not flagged as persistently malicious with zero threat persistence days recorded.

## Services and DNS

No open ports were detected during service probing. TLS certificate and HTTP header analysis returned null values, indicating the endpoint does not expose public services or is properly firewalled. Email authentication records show SPF and DMARC compliance at the domain level.

## Recommended Actions

No specific firewall rules or mitigation actions are recommended due to low risk classification. Standard monitoring practices apply. The address may be allowed through standard security policies without additional restrictions.

---

Analyst Notes: This IP represents typical OVH cloud VPS infrastructure with no anomalous threat indicators. Risk profile remains stable. No correlation to known APT campaigns or malware distribution vectors was identified.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.