51.161.65.141
IP Intelligence Briefing: 51.161.65.141
Date: 2026-06-01
---
**1. Core Profile**
- Risk Score: Moderate (50/100)
- Ownership: Owned by OVH (AS16276), registered to Dmytro, Ahrefs Pte Ltd.
- Geolocation:
- Country: Canada (CA)
- City: Singapore (geo validation inconclusive).
- Network Role:
- CloudCompute infrastructure (OVH), no public services detected.
- Subnet: 51.161.65.0/24 (mixed abuse density: 0.3387).
---
**2. Threat Indicators**
- No direct threats detected (no malware, phishing, or spam indicators).
- DNS Associations: Linked to hostname proxy-ca011-san141.ahrefs.net (no abuse records).
- BGP Analysis:
- Route stability: Unstable (route changes in 30 days).
- RPKI State: Not validated.
---
**3. Behavioral Observations**
- Recent Activity (2026-06-01):
- No open ports or TLS services detected.
- DNS Resolution: Confirmed for proxy-ca011-san141.ahrefs.net.
- Traceroute: 18 hops, with 6 timeouts; transit networks include Comcast.
- Stability: Low stability score (0.2174), indicating potential transient or misconfigured infrastructure.
---
**4. Neighborhood Analysis**
- Subnet (51.161.65.0/24):
- Total IPs: 248, with 160 active (84 flagged as high/medium risk).
- Abuse Density: 33.87% (moderate risk exposure).
- Notable Neighbors:
- IPs with risk scores ranging from 25–50 (e.g., 51.161.65.0, 51.161.65.2).
---
**5. Recommendations**
- Monitor DNS Activity: Investigate proxy-ca011-san141.ahrefs.net for unusual traffic patterns.
- Network Segmentation: Isolate cloud compute subnets to limit lateral movement risks.
- Geolocation Discrepancy: Verify Singapore/Canada geolocation mismatch (potential spoofing or misconfig).
- BGP Security: Enable RPKI validation for 51.161.0.0/17 to mitigate route hijacking risks.
---
Conclusion:
The IP is part of a cloud infrastructure with no direct malicious activity but exhibits mixed-risk subnet characteristics. SOC teams should prioritize monitoring DNS ties, geolocation anomalies, and BGP stability for potential indirect threats.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Dmytro, Ahrefs Pte Ltd |
| ASN | AS16276 |
| Network Name | OVH-CUST-281059690 |
| CIDR Block | 51.161.65.0/24 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | proxy-ca011-san141.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-ca011-san141.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 32% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-26 06:51:26 UTC |
| Last Seen | 2026-06-29 02:53:15 UTC |
| Profile Built | 2026-06-29 08:56:22 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 24 |
Full dossier details are available via our API.