148.113.192.159📋 Copy

# IP Intelligence Briefing: 148.113.192.159

Classification: Low Risk / Hosting Infrastructure

Date: 2026-08-14

Analyst: IPDebrief Intelligence

---

## Executive Summary

IP 148.113.192.159 is a low-risk (score: 25/100) cloud hosting endpoint operated by OVH Hosting, Inc. The address is assigned to netblock VPS-BHS6 (148.113.192.0/24) and resolves to hostname vps-56213e2c.vps.ovh.ca. No active threat indicators or malicious behavior observed. The IP presents a benign hosting profile with one DNSBL listing across 8 total lists.

---

## Network Ownership & Infrastructure

The IP operates as a single-service host in a cloud computing environment. PTR reverse DNS resolves to vps-56213e2c.vps.ovh.ca with forward confirmation.

---

## Network Role & Services

Open Ports:

• TCP/22 (SSH) - OpenSSH_10.0p2 Debian-7

DNS Configuration:

• SPF: Present
• DMARC: Present
• Hosted Domain Count: 0

Control Plane Metrics:

• Operator Score: 0.2609 (Basic)
• DNSBL Listed: 1 of 8 total lists
• Route Stability: False (0 route changes in 30 days)
• DNSSEC: Valid

---

## Threat Assessment

Risk Indicators:

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Threat Persistence: False
• Campaign Association: None detected

Geolocation Anomalies:

• Claimed Location: Canada (CA)
• Distance Violation: 6082km with RTT 26.0ms (minimum possible: 121.6ms)
• Geo Plausibility: False
• 5 probes conducted

Neighborhood Analysis:

• Subnet Classification: Clean
• Abuse Density: 0
• High-Risk Siblings: 0
• Medium-Risk Siblings: 0
• Active Siblings: 1

---

## Observation History

22 total observations recorded. Key signals:

• 2026-08-13: Control plane signal detected (operator score: 0.2609)
• 2026-08-06: Traceroute completed (22 hops); geo signal indicated New York, US with 0.8 confidence (note: this contradicts Canadian assignment)

---

## Relationships

DNS Associations: vps-56213e2c.vps.ovh.ca

Network Associations: VPS-BHS6 (148.113.192.0/24)

No external certificate or organization relationships detected.

---

## Recommended Actions

Status: No action required.

The IP presents a benign hosting profile with no active threat indicators. The single DNSBL listing appears to be a historical or false positive (no current abuse indicators). No firewall rules or blocking recommendations generated.

---

## SOC Analyst Notes

1. Legitimate Hosting: IP is a standard OVH VPS endpoint with SSH access. This is typical for cloud infrastructure.

2. Geolocation Inconsistency: The 6082km distance violation suggests either routing anomaly or spoofed geolocation data. However, the IP is legitimately assigned to Canadian ASN 16276.

3. Low-Risk Profile: Risk score of 25 indicates minimal threat. No malicious activity, campaigns, or persistent threats detected.

4. Monitoring Recommendation: Standard monitoring for SSH traffic. No elevated alert thresholds recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.