IP INTELLIGENCE BRIEFING: 146.59.87.172
Classification: LOW RISK / MONITOR
Date: Current analysis
---
**SUMMARY**
IP 146.59.87.172 is a low-risk cloud computing resource hosted by OVH in Poland. The address is classified as an OVH VPS endpoint with no detected open services or active threat indicators. Current risk score: 25/100.
---
**OWNERSHIP & INFRASTRUCTURE**
- Organization: OVH Sp. z o. o.
- ASN: 16276 (OVH SAS, FR)
- Network Name: VPS-WAW2
- CIDR Block: 146.59.86.0/23
- Infrastructure Type: CloudCompute / Hosting
- Geolocation: Poland (PL) โ Europe/Warsaw timezone
- PTR Record: vps-60323973.vps.ovh.net
- BGP Prefix: 146.59.0.0/17
---
**THREAT POSTURE**
Current Risk Assessment:
- Overall Risk Score: 25 (Low Risk)
- Blacklist Status: 0 direct listings; 1 DNSBL listing observed (of 8 total)
- Abuse Confidence Score: Not applicable
- Threat Indicators: None detected
- Known Campaigns: None
Service Exposure:
- No open ports detected
- No TLS certificates identified
- No HTTP services observed
- Network classification: "Firewalled / No Services"
---
**TEMPORAL ANALYSIS**
Observation History (17 total signals):
- Recent activity observed August 2026
- Geolocation signals consistently point to Poland
- DNSSEC validation: Valid
- ASN allocation: 1994-03-08 (RIPE NCC registry)
- Route stability: Unstable (route changes detected in 30-day window)
- No persistent malicious behavior identified
Risk Trend: Stable/Static. No escalation in threat activity over observation period.
---
**NEIGHBORHOOD ANALYSIS**
Subnet: 146.59.87.172/24
- Abuse Density: 0%
- Neighbor Count: 2
- Risk Distribution: 1 low-risk, 1 undetermined
Adjacent IPs:
- 146.59.87.207: Risk Score 25 (Low Risk)
- 146.59.87.241: No data available
No elevated threat activity detected in immediate subnet vicinity.
---
**NETWORK RELATIONSHIPS**
- Network Association: VPS-WAW2 (OVH Warsaw VPS network)
- DNS Associations: vps-60323973.vps.ovh.net (confirmed forward resolution)
- No external organizational or certificate relationships detected beyond OVH infrastructure
---
**RECOMMENDATIONS**
Security Actions: No immediate blocking required. IP presents as legitimate cloud infrastructure.
Monitoring Parameters:
- Track for any emergence of open ports/services
- Monitor for new blacklist listings
- Continue observation for route stability changes
Firewall Rule: Allow with monitoring or standard cloud-provider policies apply.
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | OVH Sp. z o. o. |
| ASN | AS16276 |
| Network Name | VPS-WAW2 |
| CIDR Block | 146.59.86.0/23 |
| RIR | ARIN |
| Country | PL |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vps-60323973.vps.ovh.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | vps-60323973.vps.ovh.net |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.27.3 |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16 |
๐ TLS Certificate
| SANs | kingfu.plkurkuma.plwww.kingfu.plwww.kurkuma.pl |
| Valid From | 2026-06-13T08:33:07+00:00 |
| Valid Until | 2026-09-11T08:33:06+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 06F92C686F89B046E8800F2FE47FBF61F3F9 |
| Thumbprint | D0687AD8DEDFC2064914C809696AB8216B3DBDF6 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 50% | 2 | 3 |
| reputation | 17% | 1 | 1 |
| geolocation | 17% | 1 | 1 |
| Overall | 14% | 4 | 5 |
| Data Coherence | Mostly Consistent (80%) โ 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-04 11:50:31 UTC |
| Last Seen | 2026-08-13 06:23:23 UTC |
| Profile Built | 2026-08-13 06:33:25 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.