72.251.5.145📋 Copy

# IP Intelligence Briefing: 72.251.5.145/32

Classification: Cloud Compute Infrastructure

Date: August 2026

Risk Level: Low Risk (Score: 25/100)

---

## Executive Summary

IP 72.251.5.145 is a low-risk cloud compute endpoint hosted by OVH. The address shows minimal threat indicators and no active malicious activity. However, geolocation validation issues and moderate subnet abuse density warrant continued monitoring.

---

## Technical Profile

Ownership & Registration:

• ASN: 16276 (OVH)
• Organization: Private Customer (OVH-CUST-481309263)
• CIDR Block: 72.251.5.144/28
• RIR: ARIN

Network Classification:

• Infrastructure Type: Cloud Compute
• Hosting: Yes
• CDN/Proxy/VPN: No
• Mobile/Residential: No

DNS Resolution:

• PTR Hostname: ip145.ip-72-251-5.net
• Forward Resolution: Confirmed
• Hosted Domains: None

Services Status:

• Open Ports: None detected
• HTTP/TLS: No services running
• Firewall/No Services: Active

---

## Threat Assessment

Threat Indicators:

• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Pulsedive Risk: Not applicable

Control Plane:

• Route Stability: Unstable (isRouteStable: false)
• DNSBL Listed: 1 of 8 lists
• Operator Score: 0.1304 (Minimal)

---

## Geolocation Analysis

Claimed Location: Canada (CA)

Validation Status: Failed

Discrepancies Detected:

• RTT Analysis: 33ms observed vs 121.6ms minimum required for 6,082km distance
• GeoPlausible: False
• Multiple geolocation sources report inconsistent locations
• One historical observation placed the IP in Colombia with 95% confidence

Assessment: Geolocation data is unreliable. IP should not be trusted for location-based decisioning.

---

## Historical Observations

Total Observations: 16

Threat Persistence Days: 0

Persistently Malicious: No

Key Historical Signals:

• Ownership changes: 0
• Threat observation count: 0
• Subnet classification: "mostly_clean"
• No evidence of persistent malicious behavior

---

## Network Neighborhood Analysis

Subnet: 72.251.5.145/24

Abuse Density: 0.6667 (66.67%)

Classification: Mostly Clean

Identified Neighbors:

Risk Distribution: High: 0, Medium: 0, Low: 2

---

## Relationship Graph

Associated Entities:

• DNS: ip145.ip-72-251-5.net (multiple associations)
• Network: OVH-CUST-481309263 (multiple same-network relationships)

---

## Recommended Actions

Firewall Rules: No specific blocking required

Monitoring: Continue standard monitoring

Threat Hunting: No immediate threat indicators

Actionable Guidance:

• IP poses low risk; no immediate blocking recommended
• Monitor for changes in service status or threat indicators
• Subnet abuse density (66.67%) suggests elevated background activity in neighborhood
• Consider enhanced logging if this IP initiates connections from protected segments

---

Briefing End

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.