149.56.97.184📋 Copy

IP Intelligence Briefing: 149.56.97.184

*Generated via IPDebrief tools: Profile, History, Relationships, Neighbors*

---

**1. Risk Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership: Owned by OVH Hosting, Inc. (ASN 16276)
• Geolocation: Montreal, Quebec, Canada (CIDR: 149.56.96.0/21)
• Network Role: Cloud Compute (OVH VPS)
• Services:

- HTTP/HTTPS (ports 80/443)

- SSH (port 22)

- TLS certificate for sixmexicos.com (valid, issued by Let's Encrypt)

• Threat Indicators: No active threats, spam, or malware campaigns detected.

---

**2. Observation History**

• Recent Activity:

- DNS resolution for sixmexicos.com (SPF: false, DMARC: true)

- TLS scan showing LiteSpeed server (HTTP 404 response)

- Geo validation anomaly: RTT of 26ms inconsistent with 5598km distance (plausible spoof).

• Stability: Subnet abuse density is low (1/24), but geo plausibility is flagged.

---

**3. Relationships**

• Network: Linked to OVH's OVH-VPS-149-56-96 subnet (149.56.96.0/21).
• DNS: Direct association with sixmexicos.com (SPF/DMARC records).
• Certificates: TLS certificate for sixmexicos.com matches no known malicious patterns.

---

**4. Neighborhood Analysis**

• Subnet: 149.56.97.184/24
• Neighbors: No active neighbors detected (0/24).
• Abuse Density: 0 (low risk).

---

**5. Key Findings**

• Legitimate Server: Hosted by OVH Cloud, serving sixmexicos.com with valid TLS.
• Geo Anomaly: RTT inconsistency suggests potential spoofing or misconfigured geolocation.
• No Threats: No malware, spam, or malicious campaigns detected.

---

Recommendation: Monitor geo validation discrepancies and verify sixmexicos.com's DNS configuration. No immediate mitigation required, but flag for further investigation if suspicious activity emerges.

*Data sourced from IPDebrief intelligence platform.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.