IPDebrief

51.159.181.125

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP INTELLIGENCE BRIEFING

IP Address: 51.159.181.125/32

Classification: Low Risk

Date: 2026-08-05

Analyst: IPDebrief Intelligence Platform

---

## EXECUTIVE SUMMARY

Target IP 51.159.181.125 presents a Low Risk profile (Risk Score: 25). The address is hosted on Scaleway's cloud infrastructure in Paris, France, operating as a standard web server. No malicious indicators, campaign associations, or threat feed matches were detected. The IP shows stable operational characteristics with no persistent malicious behavior observed across 21 historical signal observations.

---

## NETWORK OWNERSHIP & GEOLOCATION

AttributeValue
**ASN**12876
**Organization**Mickael Marchand / ONLINENET_DEDICATED_SERVERS
**Network Block**51.159.0.0/16
**Country**France (FR)
**Region**Île-de-France
**City**Paris
**Infrastructure Type**Cloud Compute
**Provider**Scaleway

---

## THREAT INDICATORS ASSESSMENT

IndicatorStatus
**Abuse Confidence Score**Not Flagged
**Blacklist Count**0
**Known Campaigns**None
**Tor Exit Node**False
**Known Attacker**False
**Spam Source**False
**DNSBL Listed**1 of 8 lists
**Operator Score**0.1304 (Minimal)

Threat Indicators: No active threat indicators detected. No matches in Pulsedive or other threat feeds.

---

## NETWORK INFRASTRUCTURE ANALYSIS

Services & Ports

PortProtocolService
80TCPHTTP
443TCPHTTPS
22TCPSSH (OpenSSH 8.0)

DNS Configuration

Control Plane Data

---

## NEIGHBORHOOD ANALYSIS (51.159.181.0/24)

MetricValue
**Abuse Density**0.0
**Classification**Clean
**Total Siblings**1
**Active Siblings**1
**Threat Siblings**0
**High Risk Neighbors**0
**Medium Risk Neighbors**0
**Low Risk Neighbors**0

Assessment: The /24 subnet demonstrates clean classification with no malicious sibling activity detected.

---

## OBSERVATION HISTORY

Total Observations: 21 signals

Time Period: Recent monitoring window

Key Historical Signals:

Temporal Analysis: No evidence of escalating risk or persistent malicious behavior over observation period.

---

## RELATIONSHIP GRAPH

Primary Associations:

1. Network: ONLINENET_DEDICATED_SERVERS (Scaleway infrastructure)

2. DNS Hostname: 125-181-159-51.instances.scw.cloud

Relationship Count: 21 entities linked (primarily network and DNS associations)

---

## SECURITY ACTIONS & RECOMMENDATIONS

CategoryStatus
**Firewall Rules**No recommendations
**WAF Rules**No recommendations
**Blocking Required**Not Recommended
**Monitoring Level**Standard

Risk-Based Decision: Current risk score (25) and clean threat indicators suggest no immediate blocking or restrictive firewall rules are warranted. Standard monitoring practices applicable.

---

## OPERATIONAL CONTEXT

This IP represents a legitimate Scaleway cloud hosting environment with standard web server functionality. The absence of TLS certificates, combined with SSH access, is consistent with typical cloud hosting configurations. The single DNSBL listing among 8 checked lists represents minimal concern and may be related to historical or non-malicious activity.

Confidence Level: High

Recommended Action: Monitor with standard protocols; no immediate mitigation required.

---

*Report generated by IPDebrief Intelligence Platform | Data Timestamp: 2026-08-05*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ซ๐Ÿ‡ท France
RegionÎle-de-France
CityParis
TimezoneEurope/Paris
Latitude48.86
Longitude2.35

๐Ÿข Ownership & Registration

OrganizationMickael Marchand
ASNAS12876
Network NameONLINENET_DEDICATED_SERVERS
CIDR Block51.159.0.0/16
RIRARIN
CountryFR
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR125-181-159-51.instances.scw.cloud
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnames125-181-159-51.instances.scw.cloud

๐Ÿ” DNS Hygiene

Hygiene Score40% (Fair)
SPFPresent
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierTier 3 โ€” Basic operator with some routing infrastructure
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_8.0

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
21%
22
routing
21%
22
services
30%
23
ownership
27%
23
reputation
17%
12
geolocation
13%
11
Overall22%1013
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (65%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-25 21:01:06 UTC
Last Seen2026-08-12 20:00:25 UTC
Profile Built2026-08-12 20:09:56 UTC
Data FreshnessLive
Signal Types25
Total Observations26
๐Ÿ” 25 signal types ยท 26 observations collected
This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.