151.115.167.146📋 Copy

## IP Intelligence Briefing: 151.115.167.146

Executive Summary

IP address 151.115.167.146 is a low-risk (Score: 25) cloud infrastructure endpoint hosted on Scaleway's French network infrastructure. The IP demonstrates minimal threat activity with no known malicious indicators, though it warrants monitoring due to unusual DNS resolution patterns and elevated neighborhood abuse density.

Infrastructure Profile

• Network: Scaleway (ASN 12876)
• Infrastructure Type: CloudCompute / Hosting
• Geolocation: Italy (IT) / Paris region (IDF)
• BGP Prefix: 151.115.160.0/19
• Service Status: No open ports; service classification: "Firewalled / No Services"

Threat Assessment

• Overall Risk Score: 25 (Low Risk)
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists
• Operator Score: 0.1304 (Minimal)

Network Neighborhood Analysis

The /24 subnet (151.115.167.0/24) shows moderate abuse density (0.6) with 5 total siblings and 3 active siblings. Neighbor IP risk distribution is predominantly low-risk (4/4 neighbors with Risk Score 25). This suggests the subnet hosts legitimate cloud infrastructure with occasional abuse activity from sibling IPs.

DNS Intelligence

• PTR Record: 146-167-115-151.instance.scw.eu (Scaleway instance)
• Forward Resolution: moramirathrel.clisporanten.pro (suspicious domain pattern)
• Forward Resolution Confirmed: No
• Hosted Domains: 0

Temporal Analysis

• Observation History: 25 signals observed
• Recent Trends:

- June 2026: Abuse density increased from 0.6 to 1.0

- Inherited risk increased from 7 to 12

- Classification remained "mostly_clean"

• Threat Persistence: 0 days (not persistently malicious)

Relationship Graph

45 relationships identified, primarily network-level associations (SCALEWAY-MIL). No significant hostname, organization, or certificate relationships detected.

Recommended Actions

• Monitoring: No immediate blocking required; low-risk profile
• Firewall Rules: Not required based on current risk assessment
• Investigation Priority: Monitor forward DNS resolution to moramirathrel.clisporanten.pro

SOC Analyst Notes

This IP represents Scaleway cloud infrastructure with a low-risk profile. The forward DNS resolution to a suspicious-sounding domain (moramirathrel.clisporanten.pro) warrants periodic review, though no active threat indicators are present. The subnet's elevated abuse density suggests neighboring IPs may require attention during incident response. Maintain baseline monitoring; no immediate defensive action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.