149.56.205.233📋 Copy

# IP Intelligence Briefing: 149.56.205.233/32

Classification: LOW RISK

Date: 2026-07-29

Prepared by: IPDebrief Intelligence Unit

---

## Executive Summary

IP 149.56.205.233 presents as a low-risk infrastructure endpoint hosted on OVH cloud infrastructure in Montreal, Canada. The IP demonstrates minimal threat indicators with a risk score of 25/100, no active blacklist entries, and clean neighborhood classification. No immediate defensive action required.

---

## Technical Profile

---

## Threat Assessment

Current Threat Status: CLEAN

• Blacklist Status: 0 active blacklist entries
• Known Attacker: No
• Spam Source: No
• Tor/VPN/Proxy: No
• DNSBL Listed: 1 of 8 total lists (minor concern)

Services Exposed: None detected (firewalled/no services open)

Network Role: Cloud hosting environment with no publicly exposed services.

---

## Historical Observations

16 signal observations recorded in recent history. Key temporal indicators:

• Geolocation: Consistent Montreal, Canada positioning across all probes
• ASN Verification: AS16276 (OVH SAS) confirmed via multiple sources
• Infrastructure Classification: CloudCompute confirmed; hosting services enabled
• Threat Persistence: 0 days observed; no persistent malicious activity detected
• Subnet Abuse Density: 0 (clean classification)

No escalation in risk profile detected over observation period.

---

## Entity Relationships

• Network Affiliation: OVH-CUST-188166605 (same network block)
• DNS Associations: vps81504.cloudpublic.com.br (forward resolution)
• Related Hostnames: vps81504.cloudpublic.com.br (consistent DNS records)

---

## Neighborhood Analysis

Subnet 149.56.205.233/24:

• Abuse Density: 0 (clean)
• Total Siblings: 1
• Active Threat Siblings: 0
• Classification: Clean

No neighboring IPs flagged as malicious or high-risk.

---

## Recommended Actions

Status: No immediate action required

• Firewall rules: Not recommended (low risk profile)
• Monitoring: Standard monitoring sufficient
• Investigation: No active threat indicators warranting deeper analysis

Note: DNS resolution to .com.br domain (Brazilian TLD) from Canadian hosting location warrants awareness but does not indicate malicious activity in isolation.

---

## SOC Analyst Notes

This IP represents standard cloud infrastructure hosting with no current threat activity. The Brazilian domain association (.com.br) may indicate legitimate cross-border hosting arrangements or potential misconfiguration. Continue standard monitoring. No blocking recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.