51.195.183.132📋 Copy

## IP Intelligence Briefing: 51.195.183.132

Classification: Moderate Risk | Date: Current

Executive Summary

IP 51.195.183.132 is a cloud-hosted address associated with OVH infrastructure in the United Kingdom. The IP exhibits moderate risk characteristics (Score: 40) within a high-abuse subnet environment. Current threat indicators show no active malicious campaigns, though the IP has been observed on 1 of 8 DNSBL feeds.

Network & Infrastructure Profile

• ASN: 16276 (OVH S.A.S.)
• Organization: Ahrefs Pte Ltd Dmytro
• Infrastructure Type: CloudCompute / Hosting
• Geolocation: London, England, GB (RIR: ARIN)
• Subnet: 51.195.183.0/24
• Network Role: Cloud provider infrastructure, firewalled/no services detected

DNS & Hostname Resolution

• PTR Hostname: proxy-uk003-san132.ahrefs.net
• Forward Resolution: proxy-uk003-san132.ahrefs.net
• Associated Domain: ahrefs.net
• DNSSEC: Valid
• CAA Records: Present

Threat Assessment

• Risk Score: 40/100 (Moderate)
• Abuse Confidence: Not reported
• DNSBL Listings: 1 of 8 lists
• Known Threats: None currently identified
• Tor/Exit Node: No
• Known Attacker: No
• Spam Source: No

Neighborhood Analysis

• Subnet: 51.195.183.0/24
• Abuse Density: 0.7656 (High Abuse classification)
• Total Siblings: 256
• Active Siblings: 225
• Threat Siblings: 196
• Inherited Risk: 30/100
• Neighbor Risk Distribution: 54 medium-risk, 46 low-risk IPs sampled

Relationship Graph

• Total Relationships: 51
• Primary Association: Same network (OVH_282347339)
• Network Classification: Shared infrastructure with multiple OVH network entities

Historical Observations

• Total Signals: 21 observations recorded
• Recent Activity:

- 2026-06-28: DNS resolution to ahrefs.net (Confidence: 0.80)

- 2026-06-20: Subnet abuse density assessment at 0.7656 (High Abuse)

- 2026-06-20: Geolocation signals varied between GB (London) and FR (Paris region)

- 2026-06-20: Operator score 0.2174 (Minimal risk operator)

Control Plane & Routing

• BGP Prefix: 51.195.0.0/16
• Origin ASN: 16276
• Route Stability: Unstable
• RPKI Status: Not reported
• DNSSEC Validation: Valid

Security Recommendations

Based on the moderate risk profile and high-abuse subnet environment:

1. Monitoring: Implement enhanced monitoring for this subnet given the 0.7656 abuse density

2. Threat Hunting: Correlate with the 196 threat siblings in the /24 subnet

3. DNSBL Monitoring: Track the 1 DNSBL listing to monitor for escalation

4. Allow/Block Decision: Current risk score (40) suggests allowing with monitoring; consider blocking if internal policy thresholds are <45

Intelligence Notes

The IP resolves to a legitimate ahrefs.net proxy hostname but resides in a high-abuse OVH cloud subnet. The geographic signals show some inconsistency (GB vs FR) which may indicate multi-region hosting or geo-spoofing. No active threat campaigns are currently associated with this address.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.