151.240.100.190📋 Copy

IP INTELLIGENCE BRIEFING: 151.240.100.190/32

Classification: LOW RISK

Date: 2026-07-30

---

EXECUTIVE SUMMARY

IP address 151.240.100.190 presents a low-risk profile (Risk Score: 25/100) with no active threat indicators. The address is associated with a London-based network block and exhibits minimal threat persistence. No actionable intelligence requires immediate defensive response.

---

NETWORK OWNERSHIP & GEOLOCATION

• ASN: 215114 (netutils-mnt)
• Network Block: 151.240.100.0/24 (NET-151-240-100-0-24)
• Geolocation: London, United Kingdom (GB)
• RIR: RIPE
• Registration: Abusive contact available via RDAP

INFRASTRUCTURE CLASSIFICATION

• Primary Role: Provider/Tor Exit Node
• Infrastructure Type: Unknown
• Cloud/CDN/VPN: Not applicable
• Mobile/Residential: Not identified

---

THREAT ASSESSMENT

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence: Not elevated
• Blacklist Status: Listed on 1 of 8 DNSBL feeds
• Campaign Indicators: None detected
• Known Attacks: No known attacker or spam source designation
• Tor Exit Node: Classification indicates potential Tor exit node activity

---

SERVICES & EXPOSURE

• Open Ports:

- Port 22/TCP: SSH (OpenSSH_9.2p1 Debian-2+deb12u10)

- Port 80/TCP: HTTP

• HTTP Fingerprint: HTTP/1.0, Response time 287ms
• Security Headers: HSTS, CSP, Permissions Policy: Not present
• Content: robots.txt with "Disallow: /" directive

---

TEMPORAL ANALYSIS

• Observations: 17 signals captured
• Ownership Stability: No ownership changes detected
• Threat Persistence: 0 days (No persistent malicious behavior observed)
• Threat Observation Count: 0

---

NETWORK NEIGHBORHOOD

• Subnet Abuse Density: 0 (Clean classification)
• Active Neighbors: 0
• Threat Siblings: 0
• Overall Subnet Risk: Minimal

---

RELATIONSHIP GRAPH

• Related Entities: Only network-level associations detected
• Organizations: None identified
• Hostnames/Certificates: None discovered

---

HISTORICAL SIGNALS

Recent observations (2026-07-30) show:

• Stable geolocation signals from LHR (London)
• HTTP 200 responses with standard content
• No escalation in threat signals
• No new correlations or campaign activity

---

RECOMMENDED ACTIONS

Based on the low-risk profile and current threat landscape:

1. Monitoring: Continue standard passive monitoring

2. Blocking: No immediate blocking required

3. Rule Generation: No firewall rules recommended at this time

4. Classification: Maintain "Low Risk" designation

---

INTELLIGENCE CONCLUSION

IP 151.240.100.190 demonstrates benign network behavior with no active malicious indicators. The address appears to be part of a stable, low-abuse-density network block in London. No threat correlation exists with known campaigns or attack infrastructure. SOC teams may continue routine monitoring without additional defensive measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.