185.113.249.26📋 Copy

## IP Intelligence Briefing: 185.113.249.26/32

Classification: Low Risk Infrastructure IP

Summary:

IP 185.113.249.26 is a cloud-hosted infrastructure address operated by OVH (ASN 16276) within the US. The address resolves to ip-185-113-249-26.truehostcloud.com and is associated with the truehostcloud.com domain. Current risk assessment scores 25/100 with a "Low Risk" reputation designation. The IP exhibits cloud compute characteristics with no active services or open ports detected.

Infrastructure Profile:

• Provider: OVH (ASN 16276)
• Infrastructure Type: CloudCompute / Hosting
• Geolocation: United States (US)
• Network Classification: Cloud-based, not CDN/VPN/Proxy
• DNS: PTR resolves to ip-185-113-249-26.truehostcloud.com
• Services: No open ports (firewalled/no services)
• Control Plane: DNSSEC valid, CAA records present

Threat Assessment:

• Risk Score: 25 (Low Risk)
• Threat Indicators: None detected
• Known Campaigns: None correlated
• Blacklist Status: Listed on 1 of 8 DNSBL checks
• Campaign Likelihood: None
• Known Attacker: No
• Tor/Spam Source: No

Historical Signal Analysis:

Twenty-two observations recorded over the monitoring period. The IP has maintained consistent cloud infrastructure classification. Geolocation signals placed the address in US territory with moderate confidence (0.35). DNS associations consistently resolve to truehostcloud.com infrastructure. Operator score remains at Basic level (0.3478). No evidence of escalating malicious behavior or persistent threat activity.

Subnet Analysis (185.113.249.0/24):

• Abuse Density: 0 (Clean subnet classification)
• Threat Siblings: 1
• Active Siblings: 1
• Overall Classification: Mostly Clean

Relationship Graph:

The IP maintains 35 relationships, primarily DNS associations and network-level connections to US-TRUEHOST-20240830. No anomalous cross-network associations detected.

Recommended Actions:

No immediate blocking or firewall actions recommended. The address represents legitimate cloud infrastructure with minimal threat indicators. Standard monitoring procedures apply. No additional firewall rules required based on current risk profile.

Intelligence Assessment:

This IP represents normal cloud hosting infrastructure with no malicious activity observed. The single DNSBL listing appears to be a standard operational record rather than malicious blocking. SOC teams may treat this as benign traffic requiring no special handling.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.