51.161.65.71📋 Copy

IP Intelligence Briefing: 51.161.65.71

*Generated via IPDebrief Threat Intelligence Platform*

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership:

- ASN: 16276 (OVH)

- Organization: Dmytro, Ahrefs Pte Ltd

- Network: OVH-CUST-281059690

• Geolocation:

- Country: Canada (CA)

- City: Singapore

- Coordinates: Unresolved

• Threat Indicators:

- No malicious indicators, spam, or known attacker activity.

- No DNSBL listings.

• Network Role:

- Cloud Compute Hosting (OVH infrastructure)

- No CDN, VPN, Tor, or residential/reseller ISP activity.

---

**2. Observation History**

• Recent Activity (Last 30 Days):

- Subnet abuse density: 0.5686 (High Abuse classification).

- 145 malicious sibling IPs in the 51.161.65.0/24 subnet.

- No persistent malicious activity or campaign associations.

• Stability:

- Route instability detected (BGP route changes).

- Operator score: 0.2174 (Minimal).

---

**3. Relationships & Dependencies**

• Network Associations:

- Linked to OVH-CUST-281059690 (same network).

- DNS: `proxy-ca011-san71.ahrefs.net` (Ahrefs Pte Ltd).

• Certificates & Services:

- No TLS certificates or open ports detected.

- No HTTP server banners or email authentication records.

---

**4. Neighborhood Analysis**

• Subnet: 51.161.65.0/24
• Neighbor Risk:

- 100 IPs in subnet (255 total).

- 96 IPs flagged as medium risk (score 40–50), 4 low risk.

- Subnet abuse density: 0.5686 (High Abuse).

• Inherited Risk: 22 (moderate).

---

**5. Actionable Insights**

• Monitor Subnet: The 51.161.65.0/24 subnet has a high abuse density, suggesting potential for lateral movement or shared hosting compromises.
• Verify Hosting: Ahrefs Pte Ltd’s cloud infrastructure may require closer scrutiny if this IP is associated with unusual traffic patterns.
• Check DNS: The `proxy-ca011-san71.ahrefs.net` hostname is tied to this IP; ensure it aligns with expected Ahrefs infrastructure.
• No Immediate Mitigation: No direct threats detected, but subnet-level risks warrant ongoing monitoring.

---

Threat Level: Moderate (Subnet-Level Risk)

Recommended Next Steps: Correlate with internal logs, verify DNS behavior, and monitor the 51.161.65.0/24 subnet for anomalies.

*Generated by IPDebrief Threat Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.