188.165.220.78📋 Copy

IP Intelligence Briefing: 188.165.220.78

Date: 2026-06-15

---

**1. Risk Profile**

• Risk Score: 25 (Low Risk)
• Provider: OVH (ASN 16276)
• Ownership: Octave Klaba (RIPE RIR)
• Geolocation: France (FR), no city/latitude/longitude specified.
• Threat Indicators: No malicious activity detected (no blacklists, campaigns, or abuse reports).

---

**2. Network Configuration**

• Services:

- HTTP/HTTPS (ports 80/443) with nginx/1.26.1 server banner.

- SSH (port 22) with OpenSSH 7.4.

- Valid TLS certificate (Let’s Encrypt) for `server1.uxdonut.com.br`.

• DNS:

- PTR record: `server1.uxdonut.com.br` (forwarded, no email auth).

- No SPF/DKIM/DNSSEC misconfigurations.

• Network Role:

- Cloud compute infrastructure (OVH), no CDN/VPN/proxy detected.

- Hosting: Yes (web server).

---

**3. Observation History (Last 30 Days)**

• Activity:

- Stable network behavior; no abrupt changes in routing or services.

- DNSsec validation active; no DNSBL listings.

- HTTP service consistently active (200 OK status, HSTS enabled).

• Threat Signals:

- No malicious campaigns, spam, or attacker activity observed.

- Low-risk classification persists across all signals.

---

**4. Relationships & Neighbors**

• DNS Associations:

- Linked to `server1.uxdonut.com.br` (multiple DNS records).

• Network Neighbors:

- Subnet `188.165.220.0/24` has 0 malicious IPs (abuse density 0).

- No high-risk siblings or active threats in the subnet.

---

**5. Recommendations**

• Monitoring:

- No immediate action required.

- Monitor for unexpected DNS changes or service disruptions.

• Firewall:

- Allow standard ports (80, 443, 22) for web/SSH traffic.

- No blocking rules needed based on current risk profile.

---

Conclusion: 188.165.220.78 is a legitimate OVH-hosted web server with no signs of malicious activity. No action required; continue routine monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.