51.195.183.76📋 Copy

## IP Intelligence Briefing: 51.195.183.76/32

Executive Summary

IP address 51.195.183.76 is a cloud-hosted infrastructure endpoint associated with OVH (ASN 16276) and the ahrefs.net domain. The IP demonstrates moderate risk characteristics (score: 40) with elevated neighborhood abuse density (0.668). The address is classified within a high-abuse subnet (51.195.183.0/24) with 171 of 256 total siblings flagged as threats.

Ownership and Infrastructure

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276 (OVH)
• Country: GB (United Kingdom)
• Infrastructure Type: CloudCompute / Hosting
• PTR Hostname: proxy-uk003-san76.ahrefs.net
• Registration RIR: ARIN
• Control Plane: Route stable, RPKI state unknown, DNSSEC valid

Threat Indicators

• Risk Score: 40 (Moderate Risk)
• DNSBL Status: Listed on 1 of 8 threat feeds
• Known Campaigns: None detected
• Threat Feeds: No known attacker or spam source indicators
• Tor Exit Node: No
• Abuse Confidence Score: Not available

Network Context

The IP resides in subnet 51.195.183.0/24, which exhibits high abuse density (0.668). Of 256 total siblings in the subnet, 195 are active with 171 flagged as threat sources. Risk distribution within the neighborhood shows 99 medium-risk peers and 1 low-risk peer. Multiple network relationships trace back to OVH infrastructure cluster OVH_282347339.

Historical Observations (28 Signals)

Recent signal history indicates temporal geolocation inconsistencies with records showing France (2026-06-20) and UK locations. Network classification consistently identifies the endpoint as cloud/hosting infrastructure from OVH. One observation recorded a high-severity DNSBL listing with multiple associated threat categories.

Recommended Actions

1. Monitor Traffic Patterns: The IP's moderate risk score combined with high-abuse neighborhood context warrants traffic monitoring rather than immediate blocking

2. DNSBL Verification: Validate current blacklist status across all 8 listed feeds

3. Contextual Analysis: Investigate any traffic to/from ahrefs.net domain in conjunction with this IP

4. Subnet Awareness: Apply broader subnet-level policies for 51.195.183.0/24 given the 66.8% abuse density

Intelligence Classification

This IP represents a cloud-hosted service endpoint with elevated neighborhood risk. While not definitively malicious, the context of high-abuse subnet placement and DNSBL presence suggests potential for abuse. SOC teams should maintain monitoring while avoiding blanket blocking based on this IP alone.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.