51.195.215.147📋 Copy

IP Intelligence Briefing: 51.195.215.147

Date: 2026-06-18

---

**1. Core Profile**

• Risk Score: Moderate (40/100)
• Ownership: Ahrefs Pte Ltd (AS16276, OVH)
• Geolocation: London, England, UK (ARIN registered)
• Network Role: CloudCompute (OVH infrastructure)
• Threat Indicators: No active malware, spam, or known attacker associations.
• DNS: Resolves to `proxy-uk009-san147.ahrefs.net` (no email auth records).

---

**2. Observation History**

• Recent Activity: Minimal risk signals (last 30 days).
• DNSBL Listings: 1/8 DNSBL lists flagged (low confidence).
• Stability: Route stability score: 0.2174 (Minimal).
• Abuse Density: Subnet (`51.195.215.0/24`) has 67.58% abuse density, with 173/256 neighbors flagged as threats.

---

**3. Network Relationships**

• Shared Network: Part of OVH subnet (`51.195.0.0/16`), with 197 active IPs.
• Key Connections:

- Linked to Ahrefs' infrastructure (proxy hostname).

- No direct ties to Tor, CDN, or mobile carriers.

---

**4. Neighborhood Analysis**

• Subnet Risk: High abuse density (67.58%), but 100% of neighbors are low/medium risk.
• Notable Neighbors:

- 98 IPs flagged as medium risk (40/100 average).

- 2 IPs flagged as high risk (40/100).

• Subnet Classification: "high_abuse" with inherited risk score of 27.

---

**5. Recommendations**

• Monitor: Track DNSBL activity and subnet abuse trends.
• Verify: Confirm Ahrefs' legitimate use of this IP (proxy service).
• Network Segmentation: Consider isolating high-risk neighbors in the subnet.
• Logs: Check for anomalous traffic patterns or unexpected DNS queries.

---

Conclusion:

This IP is associated with a legitimate cloud hosting provider (OVH) and appears to be a proxy server for Ahrefs. While the subnet has a high abuse density, the IP itself shows no direct malicious indicators. SOC teams should focus on monitoring the subnet for lateral movement or amplified abuse activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.