51.91.109.113📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 51.91.109.113/32

Date: Current Analysis

Classification: LOW RISK / DEFENSIVE CLEARANCE

## EXECUTIVE SUMMARY

IP 51.91.109.113 is a low-risk infrastructure address hosted on OVH SAS cloud infrastructure in France. The address demonstrates stable ownership with no malicious threat indicators. Neighborhood analysis shows clean subnet conditions with no active threat siblings. Standard web and SSH services are operational.

## INFRASTRUCTURE PROFILE

## NETWORK SERVICES

• Port 80/TCP (HTTP): Apache/2.4.10 (Debian) server banner
• Port 22/TCP (SSH): OpenSSH_6.7p1 Debian-5+deb8u8
• HTTP Version: 1.1
• Status Code: 200 OK
• HSTS: Disabled
• CSP: Not configured

## THREAT INDICATORS

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• DNSBL Lists: 1/8 (minimal impact)
• Known Campaigns: None
• Abuse Confidence Score: Not elevated

## OBSERVATION HISTORY (22 Signals)

• Stability: No ownership changes observed
• Threat Persistence: 0 days (not persistently malicious)
• Recent Activity: 2026-06-19
• Signal Types: Network classification, HTTP fingerprinting, geolocation inference
• Geolocation Confidence: 0.52 (multi-signal inference, France)
• RTT: 95-105ms average (plausible for France)

## RELATIONSHIP GRAPH (48 Relationships)

• DNS Associations: Multiple hostname entries (113.ip-51-91-109.eu)
• Network Association: VPS-SBG6 (OVH virtual private server)
• No anomalous entity links detected

## NEIGHBORHOOD ANALYSIS (51.91.109.0/24)

• Abuse Density: 0.0 (clean subnet)
• Total Siblings: 1 active
• Threat Siblings: 0
• Classification: mostly_clean
• Risk Distribution: High: 0, Medium: 0, Low: 0

## SECURITY ACTIONS & RECOMMENDATIONS

Assessment: No immediate security actions recommended. The IP demonstrates normal cloud hosting behavior with standard web and SSH services.

Suggested Firewall Policy:

• Allow traffic if legitimate business relationship exists
• Monitor for unusual outbound connections from this host
• Standard SSH access control applies (port 22)

Risk Context: This IP is classified as a multi-service host on OVH cloud infrastructure. The single DNSBL listing (8 total lists) appears to be a false positive or minor listing, as no other threat indicators are present.

## INTELLIGENCE JUDGMENT

Clearance: DEFENSIVE CLEARANCE GRANTED

Monitoring Priority: LOW

Action Required: None

This address exhibits characteristics of legitimate cloud hosting infrastructure. No defensive blocking is warranted based on current intelligence. Standard monitoring practices apply.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.