IPDebrief

51.195.215.122

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP Intelligence Briefing: 51.195.215.122

Date: 2026-06-09

---

**1. Core Profile**

- ASN: 16276 (OVH)

- Organization: Ahrefs Pte Ltd Dmytro

- Geolocation: London, England, GB

---

**2. Observation History**

- DNSSEC and CAA validation confirmed.

- No persistent threats or malware indicators.

- Subnet (`51.195.0.0/16`) shows stable routing with OVH.

---

**3. Relationships**

- Same ASN (OVH) and subnet (`51.195.215.122/24`).

- Linked to Ahrefs domain `proxy-uk009-san122.ahrefs.net`.

---

**4. Neighborhood Analysis**

- Abuse Density: 0.5059 (moderate risk).

- Active IPs: 152 (20% flagged as high-risk).

- Notable Neighbors:

- 51.195.215.0–51.195.215.4: Mixed risk scores (25–50).

- 51.195.215.128–51.195.215.255: 81 IPs with low–medium risk.

---

**5. Recommendations**

- Monitor the `51.195.215.0/24` subnet for unusual activity due to moderate abuse density.

- Validate DNS records for `proxy-uk009-san122.ahrefs.net` for potential spoofing risks.

- Allow traffic from this subnet if it’s a legitimate hosting environment.

- Consider rate-limiting or blocking high-risk neighbors (e.g., IPs with >50 risk score).

---

**6. Summary**

The IP 51.195.215.122 is associated with Ahrefs, a legitimate company, and operates as a hosting node under OVH. No malicious indicators were detected, but the surrounding subnet shows moderate abuse risk. SOC teams should focus on monitoring the subnet for anomalies while allowing traffic from this IP unless further suspicious activity is observed.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡¬πŸ‡§ United Kingdom
RegionEngland
CityLondon
TimezoneEurope/London
Latitude51.51
Longitude-0.13

🏒 Ownership & Registration

OrganizationAhrefs Pte Ltd Dmytro
ASNAS16276
Network Nameβ€”
CIDR Blockβ€”
RIRARIN
Countryβ€”
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRproxy-uk009-san122.ahrefs.net
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnamesproxy-uk009-san122.ahrefs.net

πŸ” DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAAPresent

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierHosting β€” Infrastructure provider without advanced routing
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
30%
23
routing
13%
11
services
12%
22
ownership
20%
23
reputation
22%
12
geolocation
33%
23
Overall22%1014
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-05-22 09:13:27 UTC
Last Seen2026-06-28 18:50:12 UTC
Profile Built2026-06-29 06:54:09 UTC
Data FreshnessLive
Signal Types21
Total Observations24
πŸ” 21 signal types Β· 24 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.