IP INTELLIGENCE BRIEFING: 51.195.183.36/32
SUMMARY
IP 51.195.183.36 is a cloud infrastructure endpoint operated by OVH (ASN 16276) in London, England. The IP exhibits moderate risk characteristics (risk score 40) with high-abuse subnet classification. The address is associated with ahrefs.net and operates as a firewalled cloud compute host with no active services detected.
OWNERSHIP & GEOLOCATION
- Provider: OVH
- ASN: 16276
- Organization: Ahrefs Pte Ltd Dmytro
- Location: London, England (GB)
- BGP Prefix: 51.195.0.0/16
- Registration: ARIN
NETWORK CLASSIFICATION
- Infrastructure Type: CloudCompute
- Status: Cloud provider / Hosting infrastructure
- Connection Type: Firewalled / No Services
- Open Ports: None detected
- DNS: proxy-uk003-san36.ahrefs.net (ahrefs.net)
- Forward Resolution: Unconfirmed
THREAT ASSESSMENT
- Overall Risk Score: 40 (Moderate Risk)
- Abuse Confidence Score: Not applicable
- Blacklist Status: 0 blacklists
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Campaign Affiliation: None detected
SUBNET ANALYSIS
- Subnet: 51.195.183.0/24
- Abuse Density: 0.7695 (High Abuse)
- Classification: high_abuse
- Active Siblings: 225/256
- Threat Siblings: 197
- Neighborhood Risk Distribution: 64 low-risk, 36 medium-risk, 0 high-risk
CONTROL PLANE INDICATORS
- DNSBL Listed: 1 of 8 total lists
- Operator Score: 0.2174 (Minimal)
- Route Stability: False
- RPKI State: Not validated
- DNSSEC: Valid
OBSERVATION HISTORY
19 historical observations recorded. Recent signals consistently classify infrastructure as OVH cloud hosting with persistent high abuse density (0.7695). DNS records and geolocation data remain stable across observation windows.
RELATIONSHIP GRAPH
45 relationships identified, primarily same-network associations with OVH infrastructure (OVH_282347339). No cross-organization or cross-network relationships detected.
RECOMMENDED ACTIONS
No specific security actions generated. The IP represents cloud infrastructure with moderate risk scoring but no active threat indicators. SOC analysts should monitor subnet-level abuse patterns given the high abuse density classification of the /24 neighborhood.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Ahrefs Pte Ltd Dmytro |
| ASN | AS16276 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | ARIN |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | proxy-uk003-san36.ahrefs.net |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-uk003-san36.ahrefs.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 20% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 25% | 2 | 2 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-20 11:46:57 UTC |
| Last Seen | 2026-06-28 11:56:09 UTC |
| Profile Built | 2026-06-29 06:00:59 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 24 |
Full dossier details are available via our API.