51.75.194.44📋 Copy

## INTELLIGENCE BRIEFING: IP 51.75.194.44

Classification: Low Risk Cloud Infrastructure

Date: 2026-06-19

Analyst: IPDebrief Intelligence Team

---

EXECUTIVE SUMMARY

IP 51.75.194.44 operates as an OVH cloud VPS with a low-risk reputation profile. The asset demonstrates consistent historical behavior with no malicious activity indicators. While the broader /24 subnet shows moderate abuse density (0.5), this specific IP maintains clean signal characteristics.

---

OWNERSHIP & INFRASTRUCTURE

• Organization: OVH SAS (ASN: 16276)
• Infrastructure Type: CloudCompute / Hosting
• CIDR Block: 51.75.0.0/16
• Hostname: vps-f2aa2485.vps.ovh.net
• Geolocation: France (FR) - Europe/Paris timezone

---

RISK ASSESSMENT

• Overall Risk Score: 25/100 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence: Not applicable (clean)
• Blacklist Count: 0
• DNSBL Status: Listed on 1 of 8 DNSBL feeds

Key Findings:

• No Tor exit node activity detected
• No known attacker attribution
• No spam source indicators
• No active threat campaigns identified

---

NETWORK BEHAVIOR

• Open Ports: None detected
• TLS Certificates: None present
• HTTP Services: None operational
• Service Classification: Firewalled / No Services
• Connection Type: Cloud infrastructure (no mobile/residential indicators)

Fingerprint Analysis:

• No HTTP headers detected (HSTS, CSP, permissions policies absent)
• No HTTP/2 support
• No favicon or content hash signatures

---

OBSERVATION HISTORY

Total Signals Observed: 24

Recent Activity Timeline:

• 2026-06-19: Basic classification signal (confidence: 0.60)
• 2026-06-19: Full profile signal with 6-dimension coverage (confidence: 0.24)
• 2026-06-14: Subnet abuse density analysis (0.5 density, mostly_clean classification)
• 2026-06-14: Geographic inference - France (500km accuracy radius)
• 2026-06-14: Network classification - OVH hosting infrastructure

Temporal Analysis:

• No ownership changes recorded
• Single threat observation event
• Not persistently malicious

---

RELATIONSHIP GRAPH

Total Relationships: 51

Key Associations:

• DNS Hostnames: vps-f2aa2485.vps.ovh.net (multiple associations)
• Network Infrastructure: VPS-GRA6 (multiple references)
• Control Plane: Origin ASN 16276, BGP prefix 51.75.0.0/16

Network Stability:

• Route changes in 30 days: 0
• RPKI state: Not assessed
• DNSSEC: Valid
• Route stability: False

---

NEIGHBORHOOD ANALYSIS

Subnet: 51.75.194.44/24

Abuse Density: 0.5 (50% - Moderate)

Subnet Classification: mostly_clean

Sibling IP Analysis:

Assessment: Only 1 active sibling in subnet. Both IPs maintain low-risk scores, indicating relatively clean neighborhood despite 50% abuse density metric.

---

CONTROL PLANE DATA

• Operator Score: 0.2609 (Basic)
• Delegation Age: Not applicable
• RRRP Registry: ARIN
• DNSSEC Valid: Yes
• CAA Records: Present
• DNSBL Lists: 8 total, 1 listing active

---

ACTIONABLE INTELLIGENCE

SOC Analyst Recommendations:

1. Monitor Status: Maintain standard monitoring - no immediate threat action required

2. Firewall Policy: Default allow with logging recommended; no blocking required

3. Threat Hunting: No active campaigns detected; correlate only if suspicious traffic observed

4. Geolocation Validation: ICMP validation blocked - unable to validate France location claim

Risk Context:

• Cloud hosting infrastructure with no services exposed
• Consistent historical profile with minimal threat indicators
• Single DNSBL listing appears benign (likely OVH's own infrastructure)
• Neighbor IP (51.75.194.10) shares similar risk profile

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.