# IP Intelligence Briefing: 164.132.108.75/32
Classification: Low Risk | Risk Score: 25 | Report Date: 2026-08-06
---
## Executive Summary
IP address 164.132.108.75 is identified as a low-risk infrastructure asset hosted within OVH SAS's cloud computing environment. The IP exhibits no active threat indicators, maintains valid DNSSEC configuration, and shows no evidence of malicious activity across all threat feeds. No defensive firewall rules are required at this time.
---
## Ownership and Network Context
- Organization: OVH SAS
- ASN: 16276
- Network Block: 164.132.0.0/16 (FR-OVH)
- Geolocation: Roubaix, France (FR)
- Infrastructure Type: Cloud Compute / Hosting Provider
The IP is provisioned as a virtual private server (vps-7d911421.vps.ovh.net) within OVH's enterprise cloud infrastructure. The network demonstrates stable BGP routing with no recent route changes observed.
---
## Threat Intelligence Assessment
Threat Profile: Clean | Abuse Confidence Score: N/A | Blacklist Count: 0
- Not classified as a Tor exit node, known attacker, or spam source
- No threat indicators detected across monitored feeds
- DNSBL Status: Listed on 1 of 8 checked lists (requires investigation for context)
- Campaign Associations: None identified
- Persistence Indicators: No persistent malicious behavior detected
The IP demonstrates stable ownership characteristics with zero ownership changes recorded.
---
## Network Services and Port Analysis
- Open Ports: None detected
- Service Banner: Not available (firewalled/no services)
- TLS Certificates: None present
- HTTP Services: Not responding to common probes
- Connection Type: Cloud-based infrastructure
The absence of open services is consistent with a properly configured cloud VPS or firewall-hardened server.
---
## DNS and Reputation Signals
- PTR Record: vps-7d911421.vps.ovh.net (forward confirmed)
- SPF Record: Present
- DMARC Record: Present
- DNSSEC: Valid
- Domain Authority: Basic operator score (0.2609)
DNS configuration is properly implemented with authentication protocols in place.
---
## Historical Observation Summary
Fourteen observations recorded through 2026-08-06. Signal history indicates:
- Geolocation: Consistent France (FR) classification
- Network Classification: CloudCompute/Hosting confirmed across all observations
- Risk Profile: Stable low-risk designation
- No degradation in reputation signals over observation period
---
## Subnet Neighborhood Analysis
- Subnet: 164.132.108.0/24
- Abuse Density: 0
- High-Risk Neighbors: 0
- Medium-Risk Neighbors: 0
- Low-Risk Neighbors: 0
The immediate /24 subnet shows no abuse activity, indicating this IP operates in isolation from malicious neighbors.
---
## Relationship Graph
- Network Association: FR-OVH (Same Network)
- DNS Association: vps-7d911421.vps.ovh.net (Hostname)
No external relationships to organizations, certificates, or related IP addresses detected.
---
## Recommended Actions
Current Risk Level: Low Risk (Score: 25)
- No firewall rules recommended at this time
- No blocking actions indicated based on current threat profile
- Monitoring Status: Maintain standard monitoring; no escalation required
The IP should be treated as legitimate infrastructure. Standard network hygiene practices apply.
---
## Analyst Notes
This IP address represents routine cloud hosting infrastructure with no observable malicious activity. The single DNSBL listing warrants contextual review but does not elevate the overall risk profile. No immediate defensive actions are required beyond standard monitoring procedures.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | OVH SAS |
| ASN | AS16276 |
| Network Name | FR-OVH |
| CIDR Block | 164.132.0.0/16 |
| RIR | ARIN |
| Country | FR |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | vps-7d911421.vps.ovh.net |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | vps-7d911421.vps.ovh.net |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | nginx/1.28.3 (Ubuntu) |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.5 |
๐ TLS Certificate
| SANs | msconseil.immowww.msconseil.immo |
| Valid From | 2026-08-10T12:10:43+00:00 |
| Valid Until | 2026-11-08T12:10:42+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 0660ABFA5077E6C8BA7DDCF213FD5A055387 |
| Thumbprint | 212D337A29752F98E8BB54E006EFE703BBB36A9D |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-04 05:42:25 UTC |
| Last Seen | 2026-08-13 06:04:16 UTC |
| Profile Built | 2026-08-13 06:16:41 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 28 |
Full dossier details are available via our API.