51.79.67.162📋 Copy

IP Intelligence Briefing: 51.79.67.162

*Generated via IPDebrief Threat Intelligence Platform*

---

**1. Core Profile**

• Risk Score: 50 (Moderate Risk)
• Ownership:

- ASN: 16276 (OVH Hosting, Inc.)

- Netblock: 51.79.64.0/21

- RIR: ARIN

• Geolocation:

- Country: Canada (CA)

- City: QC (possibly Quebec, inferred via DNS)

- Latitude/Longitude: Unresolved

• Network Role:

- Cloud Compute (OVH VPS)

- No active services or open ports detected

- No DNSSEC/CAA misconfigurations

---

**2. Threat & Behavior**

• Threat Indicators:

- No malicious campaigns, spam, or DNSBL listings

- No Tor exit node, known attacker, or phishing indicators

• Observation History:

- 18 observations from 2026-06-01 (likely data anomaly, as current date is 2023)

- Subnet abuse density: 0.5 (mixed risk)

- No persistent malicious activity or ownership changes

---

**3. Relationships & Neighbors**

• DNS Associations:

- Resolves to `vps-4b449f9e.vps.ovh.ca` (OVH-hosted VPS)

• Subnet Neighbors:

- Subnet: 51.79.67.162/24

- 1 high-risk neighbor (51.79.67.63, score 50)

- 0 active malicious IPs in the subnet

---

**4. Recommended Actions**

• Firewall Rules:

- Block IP via:

```bash

iptables -A INPUT -s 51.79.67.162 -j DROP

nft add rule inet filter input ip saddr 51.79.67.162 drop

```

- Cloud WAF rules (Cloudflare/AWS) provided in full profile.

• Monitoring:

- Track DNS and subnet activity for anomalies.

- Verify geolocation accuracy (city field unconfirmed).

---

**5. Summary**

This IP is associated with a legitimate OVH VPS instance, showing no immediate malicious behavior. While the subnet has a moderate abuse density, the IP itself lacks threat indicators. Exercise caution with the observation history dates (likely a data error) and consider blocking the IP as a precautionary measure given its cloud-hosted nature and subnet context.

*Threat Level: Low–Moderate | Confidence: Medium*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.