46.105.160.250📋 Copy

# IP Intelligence Briefing: 46.105.160.250

Classification: Low Risk

Date of Assessment: August 2026

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP 46.105.160.250 is a low-risk address assigned to OVH.CZ s.r.o. (ASN 16276) within the OVH-DEDICATED-FO network block (46.105.160.224/27). The IP is located in the Czech Republic and operates as a dedicated cloud compute host. While the current risk assessment indicates low threat activity, historical data shows intermittent presence on eight blacklist sources with one high-severity listing. The subnet environment remains clean with no adjacent abuse activity.

---

## Technical Profile

---

## Threat Assessment

Current Status

• Reputation: Low Risk
• Blacklist Status: 8 total listings, 3 currently active
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• DNSBL Entries: 1 listed, 8 total historical listings

Service Exposure

The IP exposes Remote Desktop Protocol (RDP) on port 3389/TCP. This service configuration is common for hosting infrastructure but may present attack surface depending on access controls.

Control Plane Indicators

• BGP Prefix: 46.105.0.0/16
• Route Stability: False (route changes observed)
• DNSSEC Valid: Yes
• RPKI State: Not assessed

---

## Historical Observations

Analysis of 23 observations reveals temporal threat patterns:

• Recent Activity (2026-08-11): Three active blacklist listings with high severity rating observed
• Historical Listings: Maximum 8 blacklist sources total
• Network Activity: Traceroute completed with 30 hops to target; ICMP validation blocked
• Subnet Consistency: Maintained consistent subnet classification as "clean" across observation periods

The IP demonstrates intermittent reputation challenges but does not exhibit persistent malicious behavior patterns.

---

## Neighborhood Analysis

Subnet: 46.105.160.250/24

Abuse Density: 0.0

Classification: Clean

Threat Siblings: 0

The /24 subnet shows no adjacent abuse activity, suggesting this IP's listings are isolated to its own endpoint rather than representing broader network compromise.

---

## Relationship Mapping

Primary associations include:

• DNS Hostname: ip250.ip-46-105-160.eu (repeated association)
• Network: OVH-DEDICATED-FO (OVH cloud infrastructure)

No organizational or campaign-level relationships identified. The IP operates as a single-service host with no certificate associations or hostname clusters.

---

## Recommended Actions

For Ingress Filtering

Block incoming RDP traffic (3389/TCP) if not explicitly required:

```

iptables -A INPUT -p tcp --dport 3389 -j DROP

```

For Egress Filtering

Monitor outbound connections from this IP; no specific egress restrictions recommended.

For Threat Intelligence Feeds

Add to monitored list due to intermittent blacklist presence. Monitor for escalation of listing severity.

---

## Conclusion

46.105.160.250 presents as a low-risk dedicated hosting endpoint within OVH's Czech infrastructure. The IP's blacklist history suggests periodic reputation challenges, but no evidence of persistent malicious activity. RDP exposure warrants attention for access control verification. The subnet environment remains clean, indicating isolated rather than systemic issues.

Recommendation: Monitor but do not block at this time. Implement RDP access restrictions and add to threat intel watchlist.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.