5.196.136.132📋 Copy

# IP INTELLIGENCE BRIEFING: 5.196.136.132

## Executive Summary

Risk Assessment: LOW RISK (Score: 25/100)

IP 5.196.136.132 is a cloud-hosted address in the OVH SAS infrastructure located in Roubaix, France. No active malicious indicators detected. Suitable for standard monitoring with no immediate blocking required.

---

## Infrastructure Profile

---

## Threat Intelligence Indicators

Malicious Activity: NONE DETECTED

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Abuse Confidence Score: Not applicable

Threat Persistence: NONE

• Threat Observation Count: 0
• Persistently Malicious: No
• Campaign Likelihood: Not detected

---

## Network Context

Subnet Analysis (5.196.136.0/24)

• Abuse Density: 0% (Clean classification)
• Active Siblings: 0
• Threat Siblings: 0
• Neighboring IP: 5.196.136.129 (Risk Score: 25)

Network Stability

• Route Stability: False
• BGP Prefix: 5.196.0.0/16
• Route Changes (30d): 0

---

## Observation History (19 Signals)

Recent signals (2026-06-21) indicate:

• DNS Listings: 8 total listings (1 active, high severity classification noted)
• Operator Score: 0.2609 (Label: Basic)
• ASN Resolution: AS16276 OVH SAS confirmed
• Geolocation Signals: Multiple sources confirming France origin
• DNSSEC Status: Valid

No escalation trends observed in temporal data.

---

## Technical Services Assessment

Active Services: NONE

• Open Ports: 0 detected
• TLS Certificates: None
• HTTP Banner: None
• Connection State: Firewalled / No Services

DNS Configuration

• Forward Resolution: Confirmed (1 hostname)
• Reverse Lookup: Confirmed (ip132.ip-5-196-136.eu)
• SPF Record: Not configured
• DMARC Record: Present

---

## Recommended Actions

Current Risk Level: LOW

No immediate firewall rules or blocking actions recommended. Standard network monitoring protocols apply.

Monitoring Recommendations:

• Continue standard traffic observation
• Monitor for service activation on previously silent ports
• Review DNS association with ip132.ip-5-196-136.eu for any suspicious domain activity

---

## Intelligence Conclusions

IP 5.196.136.132 represents standard OVH cloud infrastructure with no evidence of malicious activity. The low risk score (25/100) and clean neighborhood profile support classification as benign cloud hosting. No blocking or restrictive firewall rules are warranted at this time.

Classification: CLEAN / LOW RISK

Priority: STANDARD MONITORING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.