149.56.133.65
## Threat Intelligence Briefing: 149.56.133.65
Classification: Cloud Compute Infrastructure | Risk Level: Low | Status: No Active Threats
Ownership & Infrastructure
The IP address 149.56.133.65 is registered to OVH Hosting, Inc. (ASN 16276) within the OVH-VPS-149-56-128 network block. The address is provisioned as a VPS instance operating as web server infrastructure. Reverse DNS resolution confirms the hostname vps-f5a685cd.vps.ovh.ca.
Service Exposure
Standard web and administrative services are exposed:
- TCP/80 (HTTP)
- TCP/443 (HTTPS)
- TCP/22 (SSH)
TLS certificate issued by Let's Encrypt covers the domain api.rp-vespera.cloud and associated hostnames. The server banner indicates Apache/2.4.63 on Ubuntu.
Threat Assessment
No malicious indicators are present. The IP is not flagged as a known attacker, spam source, or Tor exit node. Blacklist enumeration returned zero listings across threat feeds. Risk score of 20 indicates low-risk classification with no current abuse correlation.
Geolocation Validation
Geolocation data reports Montreal, QC, Canada. However, RTT validation reveals a significant anomaly: measured RTT of 28ms contradicts the claimed ~5,600km distance from probe location (minimum possible RTT for that distance is 112ms). This discrepancy suggests potential geolocation spoofing or routing anomalies.
Temporal Behavior
Historical observation data shows 25 signals with no evidence of escalating threat activity. The IP maintains stable ownership and demonstrates no persistent malicious behavior patterns.
Neighborhood Analysis
The /24 subnet (149.56.133.0/24) exhibits clean classification with zero abuse density. No neighboring IPs show elevated risk indicators, indicating the IP operates in a benign hosting environment.
Recommended Actions
No immediate blocking or mitigation actions required. The IP presents as legitimate cloud infrastructure with no active threat indicators. Continue standard monitoring practices.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | OVH Hosting, Inc. |
| ASN | AS16276 |
| Network Name | OVH-VPS-149-56-128 |
| CIDR Block | 149.56.128.0/21 |
| RIR | ARIN |
| Country | Canada |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vps-f5a685cd.vps.ovh.ca |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | vps-f5a685cd.vps.ovh.ca |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 1/2 domains |
| DMARC | 1/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Apache/2.4.63 (Ubuntu) |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.9p1 Ubuntu-3ubuntu3.2 |
🔐 TLS Certificate
| SANs | api.rp-vespera.cloudrp-vespera.cloudstaging.rp-vespera.cloudwww.rp-vespera.cloud |
| Valid From | 2026-07-23T02:21:51+00:00 |
| Valid Until | 2026-10-21T02:21:50+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 05353C6598DC13B44AA701A56CEDBFA5B7BA |
| Thumbprint | 317636BF0D7BC70192B4D3271338ED91BCB60D55 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 35% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 33% | 2 | 4 |
| Overall | 27% | 10 | 18 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-27 21:53:58 UTC |
| Last Seen | 2026-08-12 21:51:11 UTC |
| Profile Built | 2026-08-12 21:59:55 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.