51.89.9.181
IP Intelligence Briefing: 51.89.9.181/32
*Generated via IPDebrief tools: Profile, History, Relationships, Neighbors, Actions*
---
**1. Core Profile**
- Risk Score: 55/100 (Moderate Risk)
- Provider: OVH BV (ASN 16276)
- Geolocation: London, England (NL), Latitude 49.38, Longitude 3.85
- Network Role: Hosting provider (OVH), no services detected
- Ownership: OVH BV (ARIN-registrant), abuse contact available via RDAP
---
**2. Threat & Behavior**
- Threat Indicators: No malicious indicators, no known campaigns, no DNSBL listings.
- Observation History:
- Recent geolocation in NL (confidence 40%), DNS association with `nubokado.com` (SPF/DMARC present).
- BGP prefix `51.89.0.0/16` (OVH), DNSSEC valid, 3/8 DNSBL listings.
- Behavioral Flags: No honeypot hits, no enumeration, no WAF violations.
---
**3. Network Relationships**
- DNS Associations:
- Linked to `info15.b.nubokado.com` (PTR record).
- Domain `nubokado.com` has SPF and DMARC records.
- Network Connections:
- Part of OVH’s `OVH-DEDICATED-FO` network.
- Subnet `51.89.9.181/24` has 1 active sibling IP (51.89.9.178, risk 55).
---
**4. Neighborhood Analysis**
- Subnet Abuse Density: 0% (clean).
- Neighbor Risk: Sibling IP (51.89.9.178) shares same moderate risk score.
---
**5. Recommended Actions**
- Firewall Blocking:
- `iptables`: `iptables -A INPUT -s 51.89.9.181 -j DROP`
- `nftables`: `nft add rule inet filter input ip saddr 51.89.9.181 drop`
- Cloudflare/AWS WAF rules included.
- Monitoring: Increase logging verbosity for this IP due to elevated risk score.
---
**Conclusion**
The IP is associated with OVH’s hosting infrastructure, geolocated in the Netherlands, and linked to a domain with SPF/DMARC. While no direct threats are detected, its moderate risk score (55) and DNS associations warrant monitoring. The subnet is clean, but proactive blocking is advised to mitigate potential risks.
*Note: This IP is not listed in known malicious databases, but its hosting role and moderate risk score suggest vigilance.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | OVH BV |
| ASN | AS16276 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | info15.b.nubokado.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | info15.b.nubokado.cominfo15.b.nubokado.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_10.0p2 Debian-7+deb13u4 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 29% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 31% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 24% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-19 15:39:20 UTC |
| Last Seen | 2026-06-28 09:27:43 UTC |
| Profile Built | 2026-06-29 03:33:12 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 27 |
Full dossier details are available via our API.