51.195.183.113📋 Copy

INTELLIGENCE BRIEFING: 51.195.183.113

Classification: LOW RISK

Date of Analysis: Current

Analyst: IPDebrief Intelligence Division

---

EXECUTIVE SUMMARY

IP address 51.195.183.113/32 is classified as Low Risk (risk score: 25) and operates within a legitimate cloud computing infrastructure. The address is owned and operated by Ahrefs Pte Ltd under the OVH provider network (ASN 16276). The IP resolves to the hostname proxy-uk003-san113.ahrefs.net and is geolocated to London, England, UK. No active threat indicators, malware signatures, or blacklist entries were detected.

---

OWNERSHIP AND NETWORK INFRASTRUCTURE

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276 (OVH SAS)
• BGP Prefix: 51.195.0.0/16
• Network Type: Cloud Compute Infrastructure
• Infrastructure Classification: Hosting Provider / Cloud
• Geolocation: London, England, United Kingdom (GB)
• Timezone: Europe/London
• Geographic Consensus: Validated across multiple sources

The IP is part of a larger cloud infrastructure deployment with a stable BGP prefix. Route stability is maintained with no significant route changes in the 30-day period.

---

DNS AND SERVICE PROFILE

DNS Configuration:

• PTR Record: proxy-uk003-san113.ahrefs.net
• Reverse DNS Confirmed: Yes
• Primary Domain: ahrefs.net
• Forward Resolution Count: 1

Service Assessment:

• Open Ports: None detected
• TLS Certificate: Not present
• HTTP Title: No title detected
• Server Banner: No banner information available
• Connection Status: Firewalled / No Services exposed

The absence of open ports and service banners suggests the IP is not directly accessible or is behind additional security controls.

---

THREAT INTELLIGENCE ASSESSMENT

Current Threat Status: CLEAN

• Risk Score: 25 (Low)
• Abuse Confidence Score: Not applicable (no abuse detected)
• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Control Plane Indicators:

• DNSBL Listed: 1 out of 8 total lists
• Operator Score: 0.087 (Minimal)
• RPKI State: Not evaluated
• Irr Consistency: Not evaluated

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 1 (historical)
• Persistently Malicious: False

---

NEIGHBORHOOD ANALYSIS

Subnet: 51.195.183.0/24

Classification: Mixed

Abuse Density: 0.3359 (from profile) / 0 (neighbor tool)

Neighbor Risk Distribution (100 neighbors analyzed):

• High Risk: 0
• Medium Risk: 72
• Low Risk: 28

Notable Neighbor IPs:

• 51.195.183.0: Risk Score 40, Authority Score 50
• 51.195.183.1: Risk Score 50, Authority Score 50
• 51.195.183.3: Risk Score 50, Authority Score 50
• 51.195.183.4: Risk Score 25, Authority Score 50

The subnet exhibits mixed classification with the majority of neighbors in the medium risk category, consistent with a cloud hosting environment. No high-risk neighbors were identified in the sample.

---

OBSERVATION HISTORY

Total Observations: 24

Analysis Period: Multiple dates including 2026-06-26 through 2026-06-27

Recent Signals:

1. Operator Score Signal (2026-06-27): Minimal operator score (0.087), confidence 0.30

2. Comprehensive Signal (2026-06-27): Multi-dimensional assessment covering threat, routing, services, ownership, reputation, and geolocation with data sufficiency score of 1

3. Banner Signal (2026-06-26): No banner matches, campaign likelihood none

4. Network Classification Signal (2026-06-26): Confirmed OVH provider, cloud infrastructure, hosting capabilities

5. Subnet Signal (2026-06-26): Abuse density 0.3359, classification mixed, inherited risk 13

Temporal Trend: Stable profile with no significant deterioration in risk posture. Historical data indicates minimal persistent malicious activity.

---

RELATIONSHIP GRAPH

Total Relationships: 58

Primary Relationship Type: Same Network (OVH_282347339)

The IP maintains multiple relationships within the OVH network infrastructure, consistent with cloud provider topology. No anomalous or unexpected relationships detected.

---

RECOMMENDED ACTIONS

Based on the comprehensive risk assessment, the following actions are recommended:

1. Allow Traffic: The IP presents low risk and is associated with legitimate cloud infrastructure (Ahrefs/OVH). No blocking required.

2. Monitor: Standard logging recommended for compliance and anomaly detection.

3. No Firewall Rules: No specific firewall rules recommended due to low risk classification.

4. Threat Hunting: No active threat indicators require investigation.

---

CONCLUSION

IP 51.195.183.113 is a legitimate, low-risk cloud computing address operated by Ahrefs Pte Ltd on OVH infrastructure. The IP shows no malicious behavior, no threat indicators, and maintains a stable operational profile. The subnet exhibits mixed classification typical of cloud hosting environments. No immediate threat or security action is required.

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.