51.75.35.120
## Intelligence Briefing: 51.75.35.120/32
Classification: Tor Exit Node / Moderate Risk
Date: Current observation cycle
Risk Score: 60/100
Ownership and Geolocation
The IP address 51.75.35.120 is registered to OVH Sp. z o. o. (ASN 16276) under the network name OVH-DEDICATED-FO. The address is located in Warsaw, Mazovia, Poland (country code: PL), within the 51.75.35.64/26 subnet.
Network Role and Threat Indicators
The IP was classified as a Tor Exit Node during analysis. Tor exit node indicators were observed, and the IP is currently flagged on one blacklist. The address resolved to SSH port 22/tcp on TCP. Forward DNS resolution confirmed the hostname ip120.ip-51-75-35.eu.
Routing and Control Plane Data
The IP originates from ASN 16276 with a BGP prefix of 51.75.0.0/16. Route stability was assessed as unstable with two route changes in the past 30 days. RPKI validation returned as valid. The IP is listed on two DNSBL lists out of eight total lists checked. Operator scoring returned a moderate rating of 0.5652.
Neighborhood Assessment
The /24 subnet (51.75.35.0/24) showed an abuse density of 1 with one active sibling IP. The neighborhood classification was mostly_clean. One threat sibling was identified within the subnet.
Historical Observations
Analysis revealed 34 total observations. Recent signals included identification as a Tor exit node, operator scores of 0.5652, and abuse density of 1. The IP was not flagged as persistently malicious. The threat observation count remained at 1 during the observation period.
Recommended Actions
Given the Tor exit node classification and blacklist presence, the IP should be considered for blocking or rate-limiting policies. The SSH service on port 22/tcp may require additional scrutiny for unauthorized access attempts.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | OVH Sp. z o. o. |
| ASN | AS16276 |
| Network Name | OVH-DEDICATED-FO |
| CIDR Block | 51.75.35.64/26 |
| RIR | ARIN |
| Country | PL |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ip120.ip-51-75-35.eu |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ip120.ip-51-75-35.eu |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 2 — Moderate operator sophistication with routing hygiene |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 45% | 2 | 5 |
| routing | 38% | 3 | 4 |
| services | 24% | 2 | 2 |
| ownership | 45% | 3 | 6 |
| reputation | 31% | 1 | 4 |
| geolocation | 35% | 2 | 3 |
| Overall | 36% | 13 | 24 |
| Data Coherence | Consistent (100%) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-04 19:33:58 UTC |
| Last Seen | 2026-08-13 06:55:24 UTC |
| Profile Built | 2026-08-13 07:08:24 UTC |
| Data Freshness | Live |
| Signal Types | 31 |
| Total Observations | 38 |
Full dossier details are available via our API.