51.195.215.145📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 51.195.215.145/32

Classification: MODERATE RISK

Report Date: 2026-06-28

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

The IP address 51.195.215.145 is associated with Ahrefs Pte Ltd Dmytro, hosted on OVH cloud infrastructure in London, GB. The IP presents a moderate risk profile (Score: 40) with no active threat indicators, though it resides within a high-abuse-density subnet. The address is currently firewalled with no open services detected.

---

## OWNERSHIP & GEOLOCATION

Organization: Ahrefs Pte Ltd Dmytro

ASN: 16276 (OVH)

Geolocation: London, England, GB

Infrastructure: CloudCompute (OVH Hosting)

CIDR Block: 51.195.0.0/16 (Origin ASN)

---

## NETWORK CLASSIFICATION

DNS Resolution: proxy-uk009-san145.ahrefs.net (ahrefs.net)

---

## THREAT ASSESSMENT

Risk Score: 40 (Moderate)

Abuse Confidence: Not applicable

Blacklist Count: 0

DNSBL Listed: 1 of 8 feeds

Tor Exit Node: No

Known Attacker: No

Spam Source: No

Known Campaigns: None

Control Plane:

• Route Stability: Unstable
• DNSSEC Valid: Yes
• RPKI State: Unknown
• Operator Score: 0.2174 (Minimal)

---

## NEIGHBORHOOD ANALYSIS

Subnet: 51.195.215.0/24

Abuse Density: 0.8008 (HIGH ABUSE CLASSIFICATION)

Total Siblings: 256

Active Siblings: 239

Threat Siblings: 205

Inherited Risk: 32

The target IP resides within a subnet exhibiting high abuse density, with approximately 80% of active addresses showing threat indicators. This contextualizes the moderate risk profile within a broader high-risk network segment.

---

## OBSERVATION HISTORY (22 Total)

Recent observations show fluctuating risk parameters:

The IP demonstrates temporal volatility with abuse density varying between 0.38 and 0.80 over the observation period. Network classification remains consistent as cloud infrastructure with no proxy/Tor/VPN characteristics.

---

## RELATIONSHIP GRAPH (41 Total)

Primary relationships identified:

• Network: OVH_282347345 (Multiple occurrences)
• No certificate or hostname associations detected
• No correlated malicious campaigns

---

## RECOMMENDED ACTIONS

Immediate: No specific blocking required; monitoring recommended

Firewall Rules: Standard cloud compute filtering

Threat Mitigation: Monitor for service activation; review outbound traffic patterns

Recommended Rule Example:

```bash

# Allow established connections, monitor new

iptables -A INPUT -p tcp --dport 80,443 -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A INPUT -p tcp --dport 80,443 -m state --state NEW -j LOG --log-prefix "IP-51.195.215.145:"

```

---

## ANALYST NOTES

The IP is associated with a legitimate SaaS provider (Ahrefs) but operates within a high-abuse-density OVH subnet. The moderate risk score is primarily driven by neighborhood context rather than direct threat indicators. SOC teams should monitor for service activation and correlate with known Ahrefs infrastructure. No immediate threat action warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.