IPDebrief

54.37.229.48

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## THREAT INTELLIGENCE BRIEFING: 54.37.229.48

Executive Summary

IP 54.37.229.48 is a cloud infrastructure endpoint operated by OVH SAS (ASN 16276) located in France. The IP registers a moderate risk score of 50, primarily attributable to its classification as a cloud compute service rather than malicious activity. No active threat indicators, campaign associations, or blacklist entries were identified.

Technical Profile

AttributeValue
**Organization**OVH SAS
**ASN**16276
**Country**France (FR)
**Infrastructure Type**CloudCompute (Single-Service Host)
**Network Role**VPS Hosting
**DNS Record**vps-5def7abb.vps.ovh.net
**Open Ports**22/TCP (SSH)
**Geolocation**Europe/Paris (±500km accuracy)

Neighborhood Assessment

Subnet 54.37.229.0/24 exhibits clean classification with zero abuse density. One sibling IP (54.37.229.90) was observed with a risk score of 25. No threat siblings were identified. The subnet contains 2 total IPs with 1 currently active.

Historical Observations

Signal history spanning 20 observations shows consistent operator scoring at 0.2609 (Basic risk level). Recent probes from mid-June 2026 confirm stable routing and geolocation consistency. No escalation in threat signals or ownership changes detected.

Threat Indicators

Recommended Actions

Due to moderate risk classification as cloud infrastructure, defensive measures are recommended:

Firewall Rules:

```bash

# iptables

iptables -A INPUT -s 54.37.229.48 -j DROP

# nftables

nft add rule inet filter input ip saddr 54.37.229.48 drop

# Cloudflare WAF

Block 54.37.229.48 โ€” IPDebrief risk score 50

```

Operational Notes:

Conclusion

This IP represents standard OVH cloud infrastructure. The moderate risk score reflects hosting provider classification rather than confirmed malicious activity. SOC teams may monitor but do not require aggressive blocking absent specific attack correlation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ซ๐Ÿ‡ท France
Regionโ€”
Cityโ€”
TimezoneEurope/Paris
Latitude48.86
Longitude2.34

๐Ÿข Ownership & Registration

OrganizationOVH SAS
ASNAS16276
Network Nameโ€”
CIDR Blockโ€”
RIRARIN
Countryโ€”
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTRvps-5def7abb.vps.ovh.net
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnamesvps-5def7abb.vps.ovh.net

๐Ÿ” DNS Hygiene

Hygiene Score80% (Excellent)
SPFPresent
DMARCPresent
FCrDNSVerified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeSingle-Service Host
Network TierHosting โ€” Infrastructure provider without advanced routing
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
22sshtcp
Closed Ports25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_9.9p1 Ubuntu-3ubuntu3.2

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
33%
23
routing
13%
11
services
12%
22
ownership
20%
23
reputation
18%
12
geolocation
33%
23
Overall21%1014
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-12 15:48:23 UTC
Last Seen2026-06-27 21:50:25 UTC
Profile Built2026-06-28 15:55:47 UTC
Data FreshnessLive
Signal Types21
Total Observations24
๐Ÿ” 21 signal types ยท 24 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.