51.91.18.151📋 Copy

IP Intelligence Briefing: 51.91.18.151

Date: 2026-06-09

---

**1. Core Profile**

• Risk Score: 59 (Moderate Risk)
• Classification: Tor Exit Node
• Provider: OVH SAS (AS16276)
• Geolocation: France (FR), ARIN-registed, no precise city data
• Threat Indicators:

- Tor exit node activity detected

- Listed in 1 DNSBL (openresolverproject.org)

• Network Role:

- No open services or TLS certificates observed

- BGP origin ASN: 16276 (OVH SAS)

---

**2. Observation History**

• Recent Activity (Last 30 Days):

- Consistent Tor exit node signals (1 observation)

- No spikes in malicious activity or network changes

- DNS resolution stability: 1 confirmed PTR hostname (`ns3151228.ip-51-91-18.eu`)

---

**3. Relationship Graph**

• Linked Entities:

- Hostname: `ns3151228.ip-51-91-18.eu` (DNS association)

- Networks: Subnet `rbx7-sdagg19a-b-n93` (multiple relationships)

- No Known Campaigns or Malware Signatures

---

**4. Neighborhood Analysis**

• Subnet: `51.91.18.151/24`
• Abuse Density: 0% (clean subnet)
• Neighbors: No active or malicious sibling IPs detected

---

**5. Actionable Insights**

• Monitor Tor Traffic: This IP serves as a Tor exit node, which could be used for anonymity-based attacks. Consider filtering Tor traffic or validating exit node destinations.
• Verify DNS Hostname: Investigate `ns3151228.ip-51-91-18.eu` for potential spoofing or misconfiguration.
• No Immediate Threat: Subnet shows no abuse activity, but Tor exit node status warrants closer scrutiny for potential upstream compromise.

---

Recommended Tools: Use `ipdebrief_actions` to generate firewall rules for Tor exit filtering.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.