# IP Intelligence Briefing: 51.68.19.91
## Executive Summary
IP 51.68.19.91 operates as an OVH-hosted infrastructure endpoint with moderate risk (55/100). The address resolves to a single-service hosting configuration in France, maintaining an established DNS presence under nuboshige.com. The IP exhibits basic routing characteristics with no evidence of active malicious campaigns.
## Network Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 55 (Moderate Risk) |
| **Provider** | OVH (ASN 16276) |
| **Location** | France (Italia region) |
| **Infrastructure** | Cloud Hosting |
| **DNS** | info1.nuboshige.com |
| **Open Ports** | 22/TCP (SSH) |
| **DNSBL Listings** | 3 of 8 total lists |
## Operational Observations
The endpoint maintains a single resolved hostname (info1.nuboshige.com) with forward confirmation enabled. Email authentication records indicate SPF and DMARC configuration presence. The control plane shows operator score of 0.2609 (Basic classification), with route stability flagged as false.
## Threat Indicators
No active threat indicators detected. The IP is not flagged as:
- Tor exit node
- Known attacker
- Spam source
- Blacklisted by major threat feeds
## Neighborhood Analysis
The /24 subnet (51.68.19.0/24) shows clean classification with zero abuse density. Four sibling IPs identified:
| IP Address | Risk Score | Authority Score |
|---|---|---|
| 51.68.19.87 | 25 | 60 |
| 51.68.19.98 | 55 | 60 |
| 51.68.19.101 | 55 | 60 |
| 51.68.19.104 | 30 | 60 |
Three sibling IPs share identical risk/authority profiles (55/60) with the target address, suggesting consistent operational patterns within the subnet.
## Historical Trends
Fourteen observations recorded. Provider attribution (OVH) and infrastructure classification (cloud hosting) have remained consistent across observation cycles. Subnet abuse density maintained at zero throughout monitoring period.
## Recommended Actions
- Monitor SSH service activity on port 22 for anomalous connection patterns
- No immediate blocking recommended; maintain observation
- Consider enhanced logging for outbound connections from this endpoint
- Track DNSBL listing status for potential reputation degradation
## Conclusion
The IP represents standard hosting infrastructure with moderate risk exposure primarily from DNSBL listings. No evidence of active compromise or malicious activity detected. Continued monitoring advised.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | OVH Srl |
| ASN | AS16276 |
| Network Name | OVH-DEDICATED-FO |
| CIDR Block | 51.68.19.0/25 |
| RIR | ARIN |
| Country | IT |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | info1.nuboshige.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | info1.nuboshige.com |
๐ DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_10.0p2 Debian-7+deb13u4 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 17% | 1 | 1 |
| Overall | 24% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-02 17:02:43 UTC |
| Last Seen | 2026-08-13 06:45:09 UTC |
| Profile Built | 2026-08-13 04:18:37 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.