51.195.183.128📋 Copy

# IP INTELLIGENCE BRIEFING

## Target: 51.195.183.128/32

Classification: Moderate Risk | Last Updated: 2026-06-14

---

EXECUTIVE SUMMARY

IP address 51.195.183.128 is assigned to OVH (ASN 16276) within the 51.195.0.0/16 block. The address resolves to ahrefs.net infrastructure in London, GB, operating as a cloud computing hosting service. Current risk assessment indicates Moderate Risk (score 40). While the IP shows no active threat indicators, the /24 subnet demonstrates elevated abuse density requiring monitoring context.

---

OWNERSHIP & NETWORK ATTRIBUTES

Classification Flags:

• Cloud: Yes
• CDN: No
• VPN: No
• Proxy: No
• Tor: No
• Hosting: Yes
• Residential: No

---

DNS & HOSTING INTELLIGENCE

• PTR Hostname: proxy-uk003-san128.ahrefs.net
• Forward Resolution: proxy-uk003-san128.ahrefs.net (confirmed)
• Domain: ahrefs.net
• CAA Records: Present
• Service Status: Firewalled / No Services (open ports: 0)
• SSL/TLS: No certificates detected

---

THREAT ASSESSMENT

Risk Score: 40 (Moderate)

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Known Campaigns: None
• Threat Persistence Days: 0

Control Plane:

• BGP Prefix: 51.195.0.0/16
• Operator Score: 0.2174 (Minimal)
• DNSBL Listed: 1 of 8 total lists
• Route Stability: False
• DNSSEC: Valid

---

SUBNET ANALYSIS (51.195.183.0/24)

Abuse Density: 0.6562 (High Abuse)

Neighbor Statistics:

• Total Siblings: 256
• Active Siblings: 193
• Threat Siblings: 168
• Inherited Risk Score: 26

Risk Distribution in /24:

• High Risk: 0
• Medium Risk: 99
• Low Risk: 1

Notable Neighbor IPs:

• 51.195.183.0: Risk 40, Authority 50
• 51.195.183.1: Risk 40, Authority 50
• 51.195.183.2: Risk 40, Authority 50
• 51.195.183.3: Risk 40, Authority 50
• 51.195.183.4: Risk 40, Authority 50

---

OBSERVATION HISTORY (21 Observations)

Recent signal history confirms:

• Infrastructure: Consistently classified as OVH cloud hosting
• Geolocation: Stable GB/London assignment
• Domain: ahrefs.net confirmed with CAA records
• Abuse Density: Consistently elevated at 0.6562

No significant changes in risk profile or threat posture observed.

---

RELATIONSHIP GRAPH

Total Relationships: 59

Primary relationship type: Same Network (OVH_282347339)

---

SECURITY RECOMMENDATIONS

Based on current risk profile and subnet context:

1. Monitoring: Continue monitoring due to high-abuse subnet context (0.6562 density).

2. Firewall: No immediate blocking required; IP is firewalled with no open services.

3. Threat Intel: Monitor for emergence of threat indicators in the /24 subnet.

4. Geographic Context: London-based infrastructure; consider regional threat landscape.

---

Analyst Notes: This IP represents legitimate cloud hosting infrastructure for ahrefs.net. The moderate risk score and high abuse density in the parent subnet warrant contextual awareness but do not indicate immediate threat activity. No defensive firewall rules recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.