54.36.60.91📋 Copy

IP Intelligence Briefing: 54.36.60.91

Date: 2026-06-15

---

**1. Risk Profile**

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0 (OVH SAS, cloud infrastructure)
• Threat Indicators: No malicious activity detected (no blacklists, spam, or campaigns).
• Network Classification: CloudCompute host (OVH SAS), likely a single-service server.

---

**2. Ownership & Geolocation**

• ASN: 16276 (OVH SAS)
• Country: France (FR)
• Region: Unknown
• Timezone: Europe/Paris
• Infrastructure: Cloud-hosted, not residential or mobile.

---

**3. Network & Service Details**

• Open Ports: SSH (port 22, OpenSSH 9.6p1)
• DNS: Resolves to `ns3093477.ip-54-36-60.eu` (single hostname, no additional domains).
• TLS/HTTP: No certificates or web services detected.
• BGP: Part of OVH's 54.36.0.0/16 prefix; route stability is low.

---

**4. Observation History**

• Last 30 Days:

- No significant changes in risk scores or threat signals.

- Consistent low-risk classification (operator score: 0.26).

- SSH service remains active but unremarkable.

---

**5. Relationships & Neighbors**

• DNS Associations: Linked to one hostname (`ns3093477.ip-54-36-60.eu`).
• Subnet Neighbors (54.36.60.0/24):

- 54.36.60.45: Low risk (score 25).

- 54.36.60.82: Medium risk (score 50).

• Subnet Abuse Density: 0% (clean).

---

**6. Recommendations**

• Monitor SSH Activity: Track SSH access logs for unusual login patterns.
• Check Neighbor Risk: Investigate 54.36.60.82 (medium risk) for potential lateral movement.
• Verify DNS Configuration: Ensure DNS records (`ns3093477.ip-54-36-60.eu`) are legitimate and not spoofed.
• Maintain Baseline: No immediate mitigation required, but continue monitoring for anomalies.

---

Source: IPDebrief Threat Intelligence Platform | © 2026 Jason Alberino.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.