51.195.183.59📋 Copy

# IP INTELLIGENCE BRIEFING

## Target: 51.195.183.59/32

EXECUTIVE SUMMARY

IP 51.195.183.59 is a cloud-hosted address operated by OVH (ASN 16276) with moderate risk profile (40/100). Infrastructure identifies as Ahrefs Pte Ltd Dmytro organization, located in London, England. While the IP itself shows no direct threat indicators, the /24 subnet exhibits high abuse density (0.7695) with 197 threat-sibling IPs among 225 active peers.

RISK ASSESSMENT

OWNERSHIP & GEOLOCATION

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276 (OVH SAS)
• Location: London, England, GB
• Timezone: Europe/London
• Geolocation Accuracy: 750km radius (inferred)

NETWORK CHARACTERISTICS

• Infrastructure Type: Cloud Compute (OVH)
• Service Status: Firewalled / No Services Detected
• DNS PTR: proxy-uk003-san59.ahrefs.net
• Forward Resolution: proxy-uk003-san59.ahrefs.net
• Domain: ahrefs.net
• DNSSEC: Valid
• CNAME Records: Yes

THREAT INTELLIGENCE

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listings: 1 of 8 total lists
• Known Campaigns: None detected

NEIGHBORHOOD ANALYSIS (51.195.183.0/24)

• Total Siblings: 256 IPs
• Active Siblings: 225 IPs
• Threat Siblings: 197 IPs (87.6% of active)
• Abuse Density: 0.7695 (High)
• Risk Classification: High Abuse
• Neighbor Risk Distribution: 49 Medium, 51 Low risk

OBSERVATION HISTORY

17 observations recorded with consistent cloud/hosting characteristics. Recent observations confirm:

• Stable ASN and subnet classification
• Persistent high-abuse neighborhood classification
• Consistent geolocation inference for London, GB
• No observed changes in threat profile over monitoring period

RELATIONSHIP GRAPH

38 relationships identified, primarily same-network associations with OVH infrastructure (OVH_282347339). No certificate or organization-level relationships detected beyond the immediate network scope.

RECOMMENDED ACTIONS

Based on risk profile (40/100), blocking is recommended for inbound traffic. Implementation rules provided for iptables, nftables, nginx, pfSense, Cloudflare WAF, and AWS WAF.

SOC RECOMMENDATION

Treat as moderate risk. While the IP resolves to legitimate Ahrefs infrastructure, the subnet exhibits elevated abuse activity. Consider:

1. Allow traffic if positive identification with Ahrefs services

2. Block if no legitimate business requirement

3. Monitor for abuse correlation with neighborhood threat IPs

4. Review firewall rules for subnet-level 51.195.183.0/24 if policy permits

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.