51.210.146.129📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 51.210.146.129/32

Date: 2026-06-15

Classification: LOW RISK

Risk Score: 25/100

## Executive Summary

IP 51.210.146.129 is a low-risk residential IP address hosted on OVH SAS cloud infrastructure in France. The IP exhibits minimal threat indicators and standard cloud compute behavior with no active malicious campaigns or abuse patterns. No immediate blocking or mitigation actions are recommended.

---

## Technical Profile

Ownership & Provider:

• ASN: 16276 (OVH SAS)
• Organization: OVH SAS
• BGP Prefix: 51.210.0.0/16
• Routing Status: Not route-stable
• RIR: ARIN

Geolocation:

• Country: France (FR)
• Region: Europe/Paris timezone
• Geolocation Confidence: High (2 sources, consensus verified)
• Minimum RTT: 91ms (5 probes)

Network Role Classification:

• Infrastructure Type: Cloud Compute
• Connection Type: Cloud
• Hosting Provider: Yes
• CDN/Proxy/VPN/Tor: No

---

## Threat Indicators Assessment

Current Threat Status: None Detected

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Pulsedive Risk: Not applicable
• Known Campaigns: None

DNSBL Status:

• Listed: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)

---

## Service Analysis

Open Ports & Services:

• Port 80/tcp: HTTP (Banner: None)
• Port 443/tcp: HTTPS (Banner: None)
• Protocol: HTTP/2.0 enabled
• Status Code: 404 (Not Found)

TLS/SSL:

• Certificate Issuer: TRAEFIK DEFAULT CERT
• Certificate Subject: CN=TRAEFIK DEFAULT CERT
• Self-Signed: No

HTTP Fingerprinting:

• HTTP Version: 2.0
• TTFB: 291ms
• HSTS: Not present
• CSP: Not present
• Referrer Policy: Not present
• Permissions Policy: Not present

DNS Configuration:

• PTR Hostnames: None
• Forward Resolution: None
• Email Authentication: SPF/DMARC not configured
• TXT Records: 0

---

## Historical Observations

Observation Count: 22 signals observed

Recent Activity (2026-06-15):

• Network classification signals consistent with OVH cloud hosting
• HTTP fingerprinting indicates standard web server configuration
• Geolocation signals confirm French origin
• Risk scoring maintained at 25 (Low Risk)
• Single threat observation from Alienvault OTX

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: No

---

## Neighborhood Analysis

Subnet: 51.210.146.129/24

• Abuse Density: 1 (Low)
• Classification: Mostly Clean
• Inherited Risk: 2
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 1 (Target IP)

---

## Relationship Graph

Connected Entities: 25 relationships identified

• Primary Association: PCI-GRA9 network (multiple instances)
• Relationship Type: Same Network

---

## Recommended Security Actions

Firewall Recommendations: None

• No blocking or rate-limiting rules required based on current risk profile
• IP exhibits standard cloud hosting behavior with no abuse indicators

SOC Analyst Guidance:

• Monitor for behavioral changes if this IP begins interacting with internal systems
• No immediate mitigation actions warranted
• Consider contextual threat intelligence if traffic originates from this IP

---

## Intelligence Confidence Level: HIGH

Data Sources: 8+ independent data sources with consensus verification. Risk assessment based on 22 historical observations and current signal analysis.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.