158.69.113.245📋 Copy

# IP Intelligence Briefing: 158.69.113.245

## Executive Summary

IP address 158.69.113.245 is classified as Low Risk with an overall risk score of 20/100. The endpoint is hosted on OVH's cloud infrastructure in Montreal, Quebec, Canada, and presents minimal threat indicators based on current intelligence.

## Network Profile

## Threat Assessment

Current Threat Status: No active threat indicators detected.

• Blacklist Status: Not listed on any threat feeds
• Known Attacker: No association
• Tor Exit Node: False
• Spam Source: False
• Campaign Association: None detected

The IP maintains a clean reputation with zero abuse confidence score and no historical threat persistence patterns.

## Network Role & Services

The endpoint functions as a single-service host with the following characteristics:

• Open Ports: Port 22/TCP (SSH) - OpenSSH 10.0p2 Debian-7
• DNS Resolution: probe1.verifycatch.com
• Forward Confirmed: Yes
• Email Authentication: No SPF/DMARC records configured

## Neighborhood Analysis

Subnet 158.69.113.245/24 shows minimal abuse activity:

• Abuse Density: 0.0
• Classification: Clean
• Sibling IPs: 1 neighbor identified (158.69.113.47, risk score 20)
• Threat Siblings: None detected

The subnet demonstrates a low-risk profile with no correlated malicious activity.

## Historical Observations

Twenty-six historical observations recorded. Recent signals from August 13, 2026, indicate:

• Geolocation signals consistently pointing to Montreal, QC
• Routing signals confirming AS16276 attribution
• No significant risk escalation patterns
• Ownership stability maintained

## Technical Fingerprint

• DNSSEC Valid: Yes
• RTT Validation: Geographic consistency verified (5597.9 km, ~32ms average)
• HTTP Services: None detected (no web server responding)
• TLS Certificates: None detected

## Recommended Actions

No immediate firewall or blocking actions recommended. The IP presents a low-risk profile with no actionable threat indicators.

Monitoring Considerations:

• Continue passive observation if this IP appears in traffic logs
• No active blocking required at network or application layers
• Monitor for any changes in DNS resolution or service banners

## Intelligence Confidence

The analysis combines current profile data, historical observations, neighborhood context, and relationship mapping. All indicators point to a standard OVH cloud hosting environment with no evidence of malicious activity.

Classification: Low Priority / Standard Monitoring

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.