51.91.177.30📋 Copy

## IP Threat Intelligence Briefing: 51.91.177.30/32

Date: [Current Date]

Classification: Moderate Risk (Score: 55/100)

Status: Active Monitoring Recommended

---

Ownership and Network Context

Organization: OVH Hosting Limited (OVH-DEDICATED-FO)

ASN: 16276

Network Block: 51.91.177.0/25

Geolocation: Dublin 2, Ireland (IE) — Coordinates: 53.14°N, 7.69°W

Infrastructure Type: CloudCompute / Hosting Environment

BGP Prefix: 51.91.0.0/16

The IP address is allocated to OVH's dedicated hosting infrastructure. The subnet operates within a cloud hosting environment with no direct CDN, VPN, or mobile carrier characteristics.

---

DNS and Hostname Resolution

PTR Record: info13.b.nuboyuki.com

Forward Resolution: nuboyuki.com (Confirmed)

Domain Status: Forward resolution verified

Email Auth: SPF and DMARC records present (requires validation)

The hostname "info13.b.nuboyuki.com" suggests automated service infrastructure. The "b.nuboyuki.com" subdomain pattern indicates batch or numbered host allocation.

---

Threat Assessment

Current Risk Score: 55/100 (Moderate)

Abuse Confidence Score: Not Assigned

Known Campaigns: None Identified

Known Attacker: False

Spam Source: False

Tor Exit Node: False

Blacklist Status:

• Listed on 3 of 8 DNSBL sources
• No active blacklist entries in standard threat feeds
• Pulsedive risk: Not assigned

Threat Indicators: Empty — No direct threat indicators identified in current profile.

---

Network Environment Analysis

Subnet: 51.91.177.0/24

Abuse Density: 0.0 (Clean)

Sibling Count: 3 total, 1 active, 0 threat siblings

Neighbor Analysis:

Observation: The /24 subnet demonstrates low overall abuse density but contains two medium-risk neighbors. This suggests the subnet is not a primary abuse vector but hosts some elevated-risk endpoints.

---

Historical Signal Analysis

Observation Count: 19 signals recorded

Timeframe: June 12–June 21, 2026

Key Historical Changes:

• June 12: Subnet classified as "clean" with 0 inherited risk and 0 threat siblings
• June 21: Subnet reclassified as "mostly_clean" with 2 inherited risk and 1 threat sibling
• Operator Score: 0.2609 (Basic classification)

Temporal Assessment: The subnet classification has degraded from "clean" to "mostly_clean" within the observation window, indicating emerging or transient activity patterns.

---

Service and Port Analysis

Open Ports: None detected

Service Status: Firewalled / No Services

TLS Certificate: Not detected

HTTP Banner: Not detected

The IP appears to be in a firewalled state with no active service enumeration. This is consistent with OVH hosting infrastructure where services may be behind additional layers.

---

Control Plane and Routing

Route Stability: False

BGP Prefix: 51.91.0.0/16

RPKI State: Not assessed

IRR Consistency: Not assessed

DNSSEC Validation: Valid

Route Changes (30d): 0

The origin ASN is route-stable but shows route instability flags, suggesting dynamic routing changes within the provider's infrastructure.

---

Recommended Actions

Priority: HIGH — Increase monitoring and logging

Monitoring Recommendation: Increase logging verbosity for this IP and review recent activity patterns. The moderate risk score combined with subnet degradation warrants enhanced visibility.

---

Intelligence Summary

IP 51.91.177.30 is a cloud-hosting endpoint under OVH infrastructure in Dublin, Ireland. While no direct threat indicators are present, the IP demonstrates:

1. Elevated Risk Profile: Score of 55/100 warrants defensive measures

2. Subnet Degradation: Classification shifted from "clean" to "mostly_clean"

3. DNSBL Presence: Listed on 3 of 8 DNSBL sources

4. Neighbor Risk: Two medium-risk siblings in the /24 subnet

Risk Assessment: This IP represents a moderate-risk endpoint in a hosting environment. While not currently associated with active campaigns or direct attack vectors, the subnet's emerging risk posture and DNSBL listings suggest potential for abuse. Implement firewall rules and enhanced logging per recommendations above.

---

*Intel generated by IPDebrief — Defensive Security Operations*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.