51.91.123.16📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 51.91.123.16/32

---

## EXECUTIVE SUMMARY

IP 51.91.123.16 is a low-risk (score: 25) cloud compute host operated by OVH SAS in France. The IP resides in a clean subnet with no observed abuse activity. No active threat indicators were detected.

---

## OWNERSHIP & INFRASTRUCTURE

• Organization: OVH SAS
• ASN: 16276 (OVH)
• CIDR Block: 51.91.120.0/21
• Netname: VPS-SBG6
• Infrastructure Type: Cloud Compute / Single-Service Host
• Country: France (FR)
• Timezone: Europe/Paris

The IP is registered as a standard VPS hosting instance with reverse DNS resolving to `vps-a0b35930.vps.ovh.net`. Email authentication records (SPF/DMARC) are present on the hosted domain.

---

## NETWORK SERVICES

• Open Ports: TCP/22 (SSH - OpenSSH 10.0p2 Debian)
• HTTP/HTTPS: No web services detected
• TLS Certificates: None observed

SSH service is operational, which is expected behavior for a VPS hosting environment.

---

## THREAT ASSESSMENT

No active threat indicators. The IP is not flagged as a known attacker, spam source, or Tor exit node. One DNSBL listing among 8 total lists suggests minimal reputation concerns.

---

## NEIGHBORHOOD ANALYSIS

• Subnet: 51.91.123.16/24
• Abuse Density: 0
• Classification: Clean
• Active/Threat Siblings: 0

The /24 subnet shows no abuse activity, indicating the IP operates in isolation from compromised or malicious infrastructure.

---

## OBSERVATION HISTORY

Twenty-one observations recorded, with recent activity from 2026-08-06. Key findings:

• SSH service scan detected with version banner
• Traceroute completed (25 hops, 104ms RTT to target)
• Geographic validation confirmed plausible location in France
• No persistent malicious behavior observed
• No ownership changes detected

---

## RELATIONSHIP MAPPING

• DNS Association: vps-a0b35930.vps.ovh.net
• Network: VPS-SBG6 (51.91.120.0/21)

No external entity correlations detected beyond standard DNS and network associations.

---

## RECOMMENDED ACTIONS

No automated recommendations generated due to low risk profile. The IP is suitable for standard monitoring without blocking.

---

Analyst Notes: This IP represents routine cloud hosting infrastructure with minimal threat posture. The open SSH port is consistent with VPS usage patterns. No immediate defensive action required unless contextual traffic analysis indicates otherwise.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.