88.167.153.114📋 Copy

IP Intelligence Briefing: 88.167.153.114

Date: 2026-06-12

1. Risk Profile

• Overall Risk: Low Risk (riskScore: 0, providerScore: 0, authorityScore: 0)
• Threat Indicators: No active malware, phishing, or exploit activity detected. Threat feeds show 8 listings (1 high-severity, 7 medium), but no confirmed malicious behavior.
• Network Stability: Stable (stabilityScore: 0, no recent route changes).

2. Ownership & Geolocation

• Registrar: ProXad (AS: FR-PROXAD-ADSL, RIPE)
• Location: Montpellier, France (Occitanie region, 43.61°N, 3.88°E).
• ISP: Residential/enterprise broadband provider.

3. Network & Service Activity

• Firewalled: No open ports or services detected (TLS/HTTP scans yielded no banners or certificates).
• DNS: No PTR records, SPF/DKIM/DNSSEC misconfigurations, or domain hosting.
• Subnet: 88.167.153.0/24 with 0 abuse density; no malicious neighbors.

4. Historical Observations

• Recent Activity:

- 2026-06-12: Listed in 8 threat feeds (high/medium severity), but no confirmed malicious campaigns.

- Subnet classification: "Clean" with no persistent threats.

- No DNS anomalies or BGP route changes detected.

5. Relationships

• Linked to FR-PROXAD-ADSL network (same ASN, no cross-subnet threats).
• No connections to known C2 servers, botnets, or malicious domains.

6. Recommendations

• Monitor: Threat feed listings for false positives or evolving indicators.
• Verify: Confirm ProXad’s compliance with GDPR/privacy regulations due to residential ISP classification.
• Block: Consider blocking IP if threat feeds persist, but no immediate action required based on current low-risk profile.

Conclusion:

This IP exhibits no active malicious behavior. While it appears in some threat feeds, the low risk score and stable network profile suggest it is benign. SOC teams should prioritize monitoring the listed threat feeds for context but do not require immediate mitigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.