51.161.37.84
IP Intelligence Dossier
Your IP: 216.73.216.123
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
IP Intelligence Briefing: 51.161.37.84
Date: 2026-06-14
---
**1. Risk Profile**
- Risk Score: 25 (Low Risk)
- Provider Score: 0 (No provider risk)
- Authority Score: 0 (No authority risk)
- Stability Score: 0 (Unstable network)
- Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).
---
**2. Ownership & Geolocation**
- Registered To: Ahrefs Pte Ltd (OVH-CUST-281059684)
- Country: Singapore (CA)
- Geo Validation:
- Plausibility: False (RTT anomaly: 25ms vs. expected 121.6ms for 6082km).
- Accuracy Radius: 3000km (low precision).
---
**3. Network Role**
- Hosting Provider: OVH (cloud-hosted infrastructure).
- Services: No open ports or TLS certificates detected.
- Network Stability: Unstable (route changes in last 30 days).
---
**4. Observation History**
- Latest Activity:
- DNS resolution for `proxy-ca005-san84.ahrefs.net` (associated with ahrefs.net).
- Network role classification as "CloudCompute" (OVH).
- Trend: No persistent malicious activity; 1 observation in last 30 days.
---
**5. Relationships**
- Linked Entities:
- Subnet: `51.161.37.0/24` (OVH-CUST-281059684).
- Hostname: `proxy-ca005-san84.ahrefs.net` (associated with ahrefs.net).
- No Direct Malicious Connections detected.
---
**6. Neighborhood Analysis**
- Subnet: `51.161.37.0/24` (251 IPs).
- Abuse Density: 40.24% (moderate risk).
- Neighbor Risks:
- 101 IPs flagged as threats (medium/high risk).
- 119 active IPs in subnet.
- Inherited Risk: 16 (moderate).
---
**7. Key Findings**
- Low Risk IP: 51.161.37.84 shows no direct malicious indicators.
- Hosting Environment: Part of OVH cloud infrastructure (Ahrefs Pte Ltd).
- Geolocation Concerns: Geo validation anomalies suggest potential spoofing or misconfigured routing.
- Subnet Risk: Moderate abuse density (40.24%) with 101 risky neighbors.
---
**8. Recommendations**
- Monitor Subnet: Track neighboring IPs for emerging threats (101 high/medium-risk IPs).
- Verify Geo Validity: Investigate RTT anomalies for potential spoofing or misconfigured routes.
- Audit Hosting Environment: Ensure OVH cloud infrastructure (Ahrefs) follows security best practices.
- No Immediate Action Required for this IP, but maintain vigilance due to subnet context.
---
Source: IPDebrief Threat Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Dmytro, Ahrefs Pte Ltd |
| ASN | AS16276 |
| Network Name | OVH-CUST-281059684 |
| CIDR Block | 51.161.37.0/24 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | proxy-ca005-san84.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-ca005-san84.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
No certificate
Issued by —
N/A
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 15% | 2 | 2 |
| reputation | 28% | 1 | 3 |
| geolocation | 31% | 2 | 3 |
| Overall | 21% | 10 | 15 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Claimed geolocation contradicts RTT physics measurement
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-12 03:44:10 UTC |
| Last Seen | 2026-06-27 20:59:01 UTC |
| Profile Built | 2026-06-28 15:03:58 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 27 |
🔍 21 signal types · 27 observations collected
This report is generated from 21+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.