51.15.195.235📋 Copy

# IP Intelligence Briefing: 51.15.195.235/32

## Executive Summary

IP 51.15.195.235 is classified as Low Risk with a risk score of 25. The endpoint is associated with Scaleway cloud infrastructure (ASN 12876) and demonstrates minimal threat activity. No open services or active threat indicators were detected during analysis.

## Technical Profile

• IP Address: 51.15.195.235/32
• Provider: Scaleway (Provider Score: 0)
• Organization: Mickael Marchand
• ASN: 12876
• Geolocation: France (FR), Île-de-France (IDF), Nanterre
• Country Confidence: High (multi-signal consensus)
• CIDR Block: 51.15.0.0/16 (Control Plane)
• Infrastructure Type: Cloud/Hosting

## Network Classification

• Infrastructure: Cloud endpoint
• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• DNS PTR: 235-195-15-51.instances.scw.cloud
• Forward Resolution: 235-195-15-51.instances.scw.cloud (scw.cloud domain)
• Email Auth: SPF configured, DMARC not present

## Threat Assessment

• Overall Risk Score: 25 (Low)
• Abuse Confidence Score: Not applicable
• Threat Indicators: None detected
• Known Campaigns: No matches
• Blacklist Status: Listed on 1 of 8 DNSBL feeds
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Persistent Malicious Activity: No

## Historical Observations

Analysis of 22 signal observations indicates stable behavior with no threat escalation:

• Recent Activity: June 19, 2026
• Geolocation Consistency: France (consistent across observations)
• RTT Measurements: Average 105.4ms, minimum 100ms (consistent with FR location)
• Threat Persistence: 0 days
• Ownership Changes: 0

## Network Relationships

• Total Relationships: 48
• Primary Association: Scaleway network infrastructure
• Network Classification: Mostly clean subnet (51.15.195.0/24)
• Subnet Abuse Density: 0 (minimal)
• Threat Siblings: 1 in subnet
• Route Stability: False (minor BGP fluctuations observed)

## Neighborhood Analysis

• Subnet: 51.15.195.0/24
• Total Siblings: 1 active
• Abuse Density: 1 (low)
• Inherited Risk: 2 (minimal)
• Classification: Mostly clean

## Recommended Actions

Based on the low-risk profile and absence of active threat indicators, the following recommendations apply:

1. Firewall: No blocking required; allow standard cloud traffic patterns

2. Monitoring: Continue passive monitoring for service enumeration

3. DNSBL: Investigate single DNSBL listing origin (if relevant to threat hunting)

4. Email Reputation: SPF record present; verify DMARC implementation if email services are deployed

5. Cloud Infrastructure: Verify if endpoint is part of legitimate organizational infrastructure

## Conclusion

IP 51.15.195.235 represents a low-risk Scaleway cloud endpoint with no active threat indicators. The IP demonstrates stable ownership and geolocation characteristics consistent with French infrastructure. SOC teams may treat this as benign traffic with standard monitoring protocols.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.