IP Intelligence Briefing: 51.158.167.126
Date: 2026-06-16
---
**1. Risk Profile**
- Overall Risk Score: Low (25/100)
- Provider Score: 0 (No provider risk indicators)
- Authority Score: 0 (No authoritative threat indicators)
- Stability: Unstable (route stability score null)
- Threat Indicators: No malicious activity, no known attackers, no spam sources, and no blacklist entries.
---
**2. Ownership & Geolocation**
- Registered To: Mickael Marchand (Scaleway, AS12876)
- Geolocation: Amsterdam, North Holland, Netherlands (NL)
- Network: SCALEWAY-AMS (CIDR: 51.158.128.0/17)
- Abuse Contact: Available via RDAP (abuse@scaleway.com)
---
**3. Network Role**
- Infrastructure: Cloud compute instance (Scaleway)
- Services: No open ports, no TLS certificates, no HTTP services detected.
- Subnet: 51.158.167.126/24 (no active or high-risk neighbors identified).
---
**4. DNS & Email Security**
- PTR Hostname: `126-167-158-51.instances.scw.cloud`
- DNS Configuration:
- SPF record present (no DMARC).
- No email authentication (MX, DKIM, or DANE) detected.
- Email Risk: No malicious email reputation indicators.
---
**5. Threat Observations (Last 30 Days)**
- Total Observations: 15
- Key Signals:
- No persistent malicious activity or threat persistence.
- Single DNSBL listing (out of 8 total lists) with low severity.
- No correlated IPs, campaigns, or malware indicators.
---
**6. Relationships & Network Context**
- Linked Entities:
- Subnet: `SCALEWAY-AMS` (AS12876)
- Hostname: `126-167-158-51.instances.scw.cloud`
- Network Density: Subnet abuse density: 0% (no high-risk neighbors).
---
**7. Behavioral & Technical Insights**
- Traceroute: 30 hops, 20 timeouts (likely cloud infrastructure with NAT).
- Route Stability: Unstable BGP prefix (51.158.128.0/17).
- Fingerprint: No server banners, TLS, or HTTP services detected.
---
**8. Recommendations**
- Monitor DNS: Ensure SPF/DKIM/DANE are configured for email security.
- Check Subnet: No immediate risks in the subnet, but monitor for changes.
- Verify Ownership: Confirm Scalewayβs ownership and abuse contact for incident response.
- No Block Required: Low-risk IP with no malicious activity detected.
---
Conclusion: 51.158.167.126 is a legitimate cloud compute instance with no current threat indicators. No action required, but ongoing monitoring is advised for DNS and network changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Mickael Marchand |
| ASN | AS12876 |
| Network Name | SCALEWAY-AMS |
| CIDR Block | 51.158.128.0/17 |
| RIR | ARIN |
| Country | NL |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 126-167-158-51.instances.scw.cloud |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 126-167-158-51.instances.scw.cloud |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 17% | 1 | 1 |
| Overall | 22% | 9 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-06-10 21:01:20 UTC |
| Last Seen | 2026-06-21 18:09:09 UTC |
| Profile Built | 2026-06-21 18:12:35 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.