51.195.36.4📋 Copy

# IP INTELLIGENCE BRIEFING: 51.195.36.4/32

Classification: Cloud Compute Host | Risk Score: 30/100 (Low Risk)

---

## EXECUTIVE SUMMARY

Target IP 51.195.36.4 is a cloud computing host operated by OVH GmbH (AS16276) located in Germany (DE). The IP resolves to hostname info1.b.nobukado.ninja and presents a low-risk profile with a score of 30. Infrastructure is classified as a Single-Service Host with SSH services accessible on port 22.

---

## OWNERSHIP & INFRASTRUCTURE

Technical Classification: The IP is hosted on OVH's dedicated cloud infrastructure. Control plane data indicates route instability with an operator score of 0.2609 (Basic). DNSSEC validation is enabled.

---

## NETWORK SERVICES & DNS

Open Ports:

• Port 22/TCP (SSH) - Banner: SSH-2.0-OpenSSH_10.0p2 Debian

DNS Configuration:

• PTR Hostname: info1.b.nobukado.ninja
• Domain: nobukado.ninja
• SPF: Configured (v=spf1 with multiple include records)
• DMARC: Configured (p=reject policy with adkim/s/aspf/s alignment)
• TXT Record Count: 1

---

## THREAT INDICATORS & REPUTATION

Threat Feeds: No active threat feed matches. No known campaigns correlated.

---

## OBSERVATION HISTORY (20 Observations)

Recent temporal analysis reveals:

1. DNSBL Listings: Two DNSBL listings detected (medium severity maximum)

2. ASN Reputation: Alienvault OTX reports has_threats: true with pulse_count: 3

3. Geolocation Signals: Consistent DE/France geolocation data with 0.25 confidence

4. Routing Signals: BGP prefix 51.195.0.0/16 with AS16276

5. Email Authentication: SPF and DMARC records consistently observed

---

## NETWORK RELATIONSHIPS

27 Total Relationships:

• DNS Associations: Multiple associations to info1.b.nobukado.ninja
• Network Associations: Multiple associations to OVH-DEDICATED-FO subnet

Related Hostname: info1.b.nobukado.ninja (primary DNS association)

---

## NEIGHBORHOOD ANALYSIS

Subnet: 51.195.36.4/24

• Abuse Density: 0
• Neighbor Count: 0
• Risk Distribution: No high/medium risk neighbors detected
• Classification: Mostly clean
• Active Siblings: 1

---

## SECURITY ACTIONS & RECOMMENDATIONS

Current Risk Profile: Low Risk (Score 30)

Recommended Actions:

• No specific blocking actions recommended based on current risk assessment
• Monitor DNSBL listing persistence
• Verify SSH service necessity on this cloud host
• Review SPF/DMARC configuration for potential email reputation impact

---

## INTELLIGENCE CONTEXT

The IP operates within OVH's cloud infrastructure with legitimate hosting designation. While DNSBL listings (2/8) suggest some reputation challenges, the overall risk score remains low. The hostname nobukado.ninja demonstrates proper email authentication configuration (SPF and DMARC reject policy). SSH access is open, which may require validation against organizational security policies for cloud-hosted infrastructure.

Conclusion: This IP represents a legitimate cloud hosting resource with minor reputation concerns. No immediate blocking required. Monitor DNSBL status and validate SSH necessity against security baselines.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.