152.228.135.87📋 Copy

# THREAT INTELLIGENCE BRIEFING

Target IP: 152.228.135.87/32

Date: 2026-06-15

Classification: Low Risk / Cloud Infrastructure

---

## EXECUTIVE SUMMARY

IP 152.228.135.87 presents a low-risk profile (Risk Score: 25) and is classified as cloud compute infrastructure hosted by OVH SAS. The address shows no evidence of malicious activity, blacklist listings, or peer-related threats. Network environment is clean with no active sibling threats detected.

---

## OWNERSHIP & GEOLOCATION

---

## THREAT ASSESSMENT

• Risk Score: 25/100 (Low Risk)
• Blacklist Count: 0
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable

Network Classification Flags:

• Cloud Infrastructure: ✓
• CDN: ✗
• VPN: ✗
• Proxy: ✗
• Tor: ✗
• Hosting: ✓
• Mobile: ✗
• Residential: ✗

---

## NETWORK SERVICES & PORTS

• Open Ports: None detected
• TLS Certificate: Not detected
• HTTP Service: No active HTTP banner
• Fingerprint: No distinctive server signature

---

## OBSERVATION HISTORY

Total Signals: 17 observations

Most Recent Activity: 2026-06-15

Key historical signals include:

• DNSSEC and operator validation assessments (June 15, 2026)
• Geolocation validation with 500km accuracy radius
• RTT measurements: avg 110.4ms, min 107ms, max 116ms
• No threat persistence indicators
• Ownership stability: No changes detected

---

## RELATIONSHIP ANALYSIS

Associated Entities: 32 records

• DNS Associations: vps-916a681c.vps.ovh.net
• Network Associations: VPS-SBG6 subnet

Relationship graph shows standard OVH VPS infrastructure patterns with no anomalous connections to known malicious infrastructure.

---

## NEIGHBORHOOD ANALYSIS

Subnet: 152.228.135.87/24

• Abuse Density: 0 (Clean)
• Classification: Clean
• Threat Siblings: 0
• Active Siblings: 0

---

## SECURITY RECOMMENDATIONS

Action: Monitor / Allow based on risk profile

• No immediate blocking required
• Standard logging recommended for cloud VPS traffic
• No specific firewall rules generated due to low-risk classification
• Continue routine traffic monitoring

---

## ANALYST NOTES

This IP represents standard OVH cloud hosting infrastructure. The clean neighborhood profile, absence of blacklist listings, and lack of open services indicate legitimate VPS usage. No correlation with active threat campaigns or malicious peer infrastructure. SOC teams may treat as benign with standard logging practices.

Confidence Level: High

Data Sources: IPDebrief Intelligence Platform

Last Updated: 2026-06-15

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.