149.56.15.83📋 Copy

# IP INTELLIGENCE BRIEFING: 149.56.15.83/32

## EXECUTIVE SUMMARY

IP address 149.56.15.83 was classified as Moderate Risk with an IPDebrief risk score of 40. The IP is hosted on OVH Hosting, Inc. infrastructure in Montreal, Quebec, Canada. No active threat indicators were detected, though the IP appears on 2 of 8 DNSBL lists. The IP is currently firewalled with no open services detected.

---

## NETWORK AND OWNERSHIP PROFILE

• IP Address: 149.56.15.83/32
• ASN: 16276 (OVH Hosting, Inc.)
• Organization: OVH Hosting, Inc.
• CIDR Block: 149.56.12.0/22
• Network Name: OVH-VPS-149-56-12-NET
• Geolocation: Montreal, Quebec, Canada (CA)
• Coordinates: 45.5075°N, -73.5887°W
• Infrastructure Type: Cloud Compute / Hosting Provider
• DNS PTR Record: 83.ip-149-56-15.net

---

## THREAT ASSESSMENT

The IP scored 40 on the overall risk scale. Provider and authority scores were 0. The control plane operator score was 0.2609 (Basic). RPKI state and IRR consistency were not determinable. The IP is listed on 2 DNSBL entries out of 8 total checks.

---

## BEHAVIORAL AND HISTORICAL ANALYSIS

Observation Period: 15 signals recorded

Recent Activity: All observations occurred on 2026-07-31

Key Historical Findings:

• Geolocation Consensus: True (1 source)
• Network Role: Cloud compute environment (confirmed)
• Threat Persistence: 0 days (not persistently malicious)
• Threat Observation Count: 0
• Ownership Changes: 0

Anomalies Detected:

• RTT Violation: Observed RTT of 31–36ms violates minimum expected RTT of 112ms for the claimed 5,598km distance from probe location. Geo validation flagged as implausible.
• Geo Plausible: False (distance discrepancy detected)

---

## INFRASTRUCTURE AND NETWORK CONTEXT

• Services: No open ports detected (Firewalled / No Services)
• TLS Certificate: None
• HTTP Banner: None
• Fingerprint: No distinctive web server signatures
• Email Reputation: Not scored
• Traceroute: 0 hops recorded
• Behavioral Indicators:

- Honeypot Hits: 0

- Enumeration Strikes: 0

- WAF Violations: None recorded

Relationship Graph: 4 associations identified

• DNS Association: 83.ip-149-56-15.net (duplicate entries)
• Same Network: OVH-VPS-149-56-12-NET (duplicate entries)

Neighborhood Analysis: Subnet 149.56.15.0/24 showed:

• Neighbor Count: 0
• Abuse Density: 0
• Risk Distribution: High (0), Medium (0), Low (0)
• Active Threat Siblings: 0

---

## RECOMMENDED ACTIONS

Based on the risk profile, the following firewall rules were generated:

Note: These recommendations are probabilistic and should be combined with other signals before taking action.

---

## ANALYST NOTES

The IP exhibits characteristics of a standard cloud hosting environment with no active malicious services. The moderate risk score (40) stems primarily from DNSBL listings and geolocation validation anomalies rather than active threat indicators. The RTT violation suggests either inaccurate geolocation data or routing anomalies. No immediate threat mitigation required beyond standard cloud provider monitoring. Continuous monitoring recommended due to hosting provider infrastructure type.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.