51.195.183.114📋 Copy

# IP Intelligence Briefing: 51.195.183.114

## Executive Summary

IP 51.195.183.114 is a cloud compute resource operated by OVH (ASN 16276) in London, England. The IP resolves to the ahrefs.net domain with PTR hostname proxy-uk003-san114.ahrefs.net. Current risk assessment indicates moderate risk (score: 40) with classification as "high_abuse" subnet. The IP is currently firewalled with no active services detected.

## Technical Profile

Ownership & Infrastructure:

• ASN: 16276 (OVH)
• Organization: Ahrefs Pte Ltd Dmytro
• Registration: ARIN
• Infrastructure Type: CloudCompute (Hosting service)
• Anycast: No

Geolocation:

• Country: United Kingdom (GB)
• Region: England
• City: London
• Coordinates: 51.8582°N, 0.0874°E (claimed)
• Distance from claim: 500.4 km
• Minimum possible RTT: 10.01ms
• Observed RTT: 86-91ms

DNS Configuration:

• Domain: ahrefs.net
• PTR: proxy-uk003-san114.ahrefs.net
• Forward Resolution: 1 hostname
• DNSSEC: Valid
• CAA Records: Present

Network State:

• Open Ports: None detected
• Status: Firewalled / No Services
• Route Stability: Unstable
• DNSBL: Listed on 1 of 8 feeds

## Threat Assessment

Current Risk Score: 40 (Moderate Risk)

Threat Indicators:

• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Blacklist Count: 0
• Threat Feeds: None active
• Known Campaigns: None identified

Control Plane:

• BGP Prefix: 51.195.0.0/16
• Route Changes (30d): 0
• MOAS: No
• RPKI State: Not reported

## Neighborhood Analysis

Subnet: 51.195.183.0/24

Abuse Profile:

• Abuse Density: 76.95% (High)
• Classification: high_abuse
• Inherited Risk: 30
• Total Siblings: 256
• Active Siblings: 225
• Threat Siblings: 197

Risk Distribution (Sampled): 100 neighbors analyzed

• High Risk: 0
• Medium Risk: 15
• Low Risk: 85

## Observation History

Total Observations: 18

Recent Signals (June 2026):

• Abuse classification consistently marked as "high_abuse"
• Provider identified as OVH
• Geographic signals consistently point to GB
• DNS resolution consistently confirmed to ahrefs.net
• RTT measurements stable: 86-91ms

Temporal Analysis:

• Threat Persistence Days: 0
• Threat Observation Count: 1
• Ownership Changes: 0
• Not Persistently Malicious: True

## Relationships

Detected Relationships: 40 total

• Primary Classification: Same Network (OVH_282347339)
• All relationships map to OVH network infrastructure

## Security Recommendations

Firewall Rules:

• No specific blocking recommendations due to lack of active threat indicators
• Monitor for outbound connections from this IP to external services
• Consider rate limiting if traffic patterns indicate abuse

Monitoring Priorities:

1. Track subnet-level abuse trends (51.195.183.0/24 shows 76.95% abuse density)

2. Monitor for service activation on previously firewalled ports

3. Watch for DNSBL additions or removals

4. Correlate with other 197 threat siblings in subnet

## Conclusion

IP 51.195.183.114 presents moderate risk within a high-abuse density OVH subnet. While no active threat indicators are present, the subnet classification warrants continued monitoring. The IP belongs to a legitimate hosting infrastructure (ahrefs.net) but operates in a network environment with elevated abuse characteristics. Recommend baseline monitoring without immediate blocking.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.