IPDebrief

51.15.216.52

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 51.15.216.52/32

Classification: Low Risk | Date: Current Intelligence Cycle

Prepared For: SOC Operations Team

---

## Executive Summary

IP address 51.15.216.52 operates as a Scaleway cloud infrastructure endpoint with a low-risk profile (score: 25). Analysis indicates legitimate commercial hosting activity serving Apple Inc. software distribution services. No active threat indicators detected. No immediate blocking recommended.

---

## Infrastructure Profile

AttributeValue
**IP Address**51.15.216.52/32
**ASN**12876
**Organization**Mickael Marchand (SCALEWAY)
**Country**FR (France)
**City**Paris, Île-de-France
**Infrastructure Type**Cloud Compute
**Classification**Hosting/Web Server
**Reputation**Low Risk

Network Assignment:

---

## Service & Protocol Analysis

ServiceStatusDetails
**HTTPS (443/TCP)**ActiveAkamaiGHost server banner
**TLS Certificate**ValidIssued by Apple Public EV Server RSA CA 1 - G1
**Certificate Subject**swdist.apple.comApple Inc., Cupertino, CA
**Associated Domains**swcatalog.apple.com, swcdn.apple.com, swdist.apple.com, swscan.apple.comApple software distribution
**DNS PTR**52-216-15-51.instances.scw.cloudScaleway cloud hostname

---

## Threat Indicators Assessment

IndicatorStatus
Tor Exit NodeNo
Known AttackerNo
Spam SourceNo
Blacklist Count0
Abuse Confidence ScoreN/A
Known CampaignsNone
Threat FeedsNone
DNSBL Listed1 of 8 total lists
Is Persistently MaliciousNo

---

## Subnet Neighborhood Analysis

Scope: 51.15.216.52/24

No adjacent threat activity detected within the /24 subnet.

---

## Relationship Graph

Total Relationships: 16

---

## Historical Observation Summary

Observation Count: 25 signals

Recent Activity (2026-08-05):

Temporal Analysis:

---

## Control Plane Data

MetricValue
Origin ASN12876
BGP Prefix51.15.0.0/16
Route StabilityFalse
RPKI StateN/A
DNSSEC ValidYes
Has CAANo
Operator Score0.1304 (Minimal)

---

## Recommended Actions

Security Posture: Monitor but no immediate action required.

Firewall Rules: None recommended (low-risk classification)

Monitoring Guidance:

---

## Conclusion

IP 51.15.216.52 represents a legitimate Scaleway cloud infrastructure endpoint hosting Apple software distribution services. The IP maintains a clean reputation profile with no threat indicators, no malicious neighborhood activity, and consistent historical observations. This IP should be treated as benign infrastructure.

Classification: LOW RISK - No Action Required

Next Review: Standard periodic intelligence cycle

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ซ๐Ÿ‡ท France
RegionÎle-de-France
CityParis
TimezoneEurope/Paris
Latitude48.86
Longitude2.35

๐Ÿข Ownership & Registration

OrganizationMickael Marchand
ASNAS12876
Network NameSCALEWAY
CIDR Block51.15.0.0/16
RIRARIN
CountryFR
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR52-216-15-51.instances.scw.cloud
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnames52-216-15-51.instances.scw.cloud

๐Ÿ” DNS Hygiene

Hygiene Score60% (Good)
SPF2/2 domains
DMARC1/2 domains
FCrDNSNot verified
DNSSECValid
CAANot configured
Domains Checked2 domains

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting โ€” Infrastructure provider without advanced routing
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
443httpstcpโ€”
Closed Ports22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned)
ServerAkamaiGHost
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
CN=swdist.apple.com, O=Apple Inc., L=Cupertino, S=California, C=US, SERIALNUMBER=C0806592, jurisdictionStateOrProvinceName=California, jurisdictionCountryName=US, businessCategory=Private Organization
Issued by CN=Apple Public EV Server RSA CA 1 - G1, O=Apple Inc., C=US
Self-signed: No
SANsswcatalog.apple.comswcdn.apple.comswdist.apple.comswscan.apple.com
Valid From2026-03-18T17:36:34+00:00
Valid Until2026-09-24T19:09:47+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period190 days
Serial Number0841C3BCFFE329034F569899FBBD7BD3
Thumbprint75B59A0ACC77131BDAA8900D16DDAD955EA8D911

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
35%
23
routing
13%
11
services
30%
23
ownership
27%
23
reputation
17%
12
geolocation
30%
23
Overall25%1015
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceMixed Signals (68%) โ€” 2 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
โš  Geo sources disagree on country: FR, US
โš  TLS certificate claims US but primary geo says FR

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-22 19:33:18 UTC
Last Seen2026-08-12 17:16:48 UTC
Profile Built2026-08-12 17:31:45 UTC
Data FreshnessLive
Signal Types25
Total Observations27
๐Ÿ” 25 signal types ยท 27 observations collected
This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.