51.195.183.147📋 Copy

# THREAT INTELLIGENCE BRIEFING

IP Address: 51.195.183.147/32

Classification: Moderate Risk (Score: 40/100)

Date: Current Analysis

---

## EXECUTIVE SUMMARY

IP 51.195.183.147 operates within OVH cloud infrastructure and resolves to aresnet domain infrastructure. The IP shows moderate risk with elevated neighborhood abuse density. No active malicious indicators or known campaign associations detected.

---

## OWNERSHIP & GEOLOCATION

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276 (OVH)
• Location: London, England, GB
• Network Block: 51.195.0.0/16
• Infrastructure Type: Cloud Compute (Hosting enabled)

---

## NETWORK CHARACTERISTICS

• DNS Resolution: proxy-uk003-san147.ahrefs.net
• Registered Domain: ahrefs.net
• Service Status: Firewalled / No Services (No open ports detected)
• TLS/HTTP: No active services exposed

---

## THREAT INDICATORS

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Campaign Associations: None identified
• Abuse Confidence: Data insufficient for scoring

---

## NEIGHBORHOOD ANALYSIS

Subnet: 51.195.183.0/24

• Abuse Density: 0.668 (High Abuse Classification)
• Total Siblings: 256
• Active Siblings: 195
• Threat Siblings: 171
• Inherited Risk Score: 26

The subnet exhibits elevated abuse activity with approximately 67% of active IPs flagged as threats. However, this target IP maintains a risk score of 40, positioned in the medium-risk category relative to neighborhood peers.

---

## OBSERVATION HISTORY

• Total Observations: 23 signals recorded
• Recent Operator Score: 0.2174 (Minimal)
• Threat Persistence: No persistent malicious activity detected
• Ownership Changes: None recorded
• Certificate Signals: Present (crt-sh source)

The IP demonstrates stable operational behavior with no degradation in risk profile over the observation window.

---

## RELATIONSHIP NETWORK

• Total Relationships: 41
• Primary Association: Same Network (OVH_282347339)
• Related Entities: Multiple network-level associations within OVH infrastructure

---

## RECOMMENDATIONS

1. Allow with Monitoring: Risk score of 40 indicates moderate threat level suitable for permitted traffic with logging

2. No Blocking Required: No active malicious indicators present

3. Neighborhood Awareness: Monitor subnet 51.195.183.0/24 for coordinated abuse patterns

4. DNSBL Verification: Investigate reason for single DNSBL listing if security policy requires

---

Status: Active Monitoring Recommended

Classification: Moderate Risk Infrastructure Asset

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.