51.195.215.167📋 Copy

IP Intelligence Briefing: 51.195.215.167

*Generated using IPDebrief threat intelligence tools*

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Provider: OVH (ASN 16276)
• Ownership: Ahrefs Pte Ltd (Dmytro)
• Geolocation: London, England (GB)
• Network Role: CloudCompute (OVH infrastructure)
• Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).

---

**2. Observation History**

• Latest Signal: DNS resolution for `proxy-uk009-san167.ahrefs.net` (confidence 0.80).
• Geolocation: Consistent with London, UK (RTT ~88ms, accuracy 750km).
• Network Stability: Subnet `51.195.215.167/24` shows high abuse density (0.625), but this IP itself has no direct abuse signals.

---

**3. Relationships**

• Network Links:

- Connected to OVH network `OVH_282347345` (28+ relationships).

• DNS: Resolves to `proxy-uk009-san167.ahrefs.net` (no email auth records).
• Certificates: No TLS certificates or HTTP services detected.

---

**4. Neighborhood Analysis**

• Subnet: `51.195.215.167/24`
• Neighbor Risk: 100 IPs in subnet (98 medium-risk, 2 low-risk).
• Abuse Density: High (0.625), but this IP is not flagged as malicious.

---

**5. Recommendations**

• Monitoring: Track subnet activity due to high abuse density.
• Firewall: Consider allowing traffic to this IP if it’s a legitimate cloud service (Ahrefs).
• Verification: Cross-check with Ahrefs’ infrastructure to confirm ownership and purpose.

---

Conclusion: This IP is part of a cloud-based infrastructure (OVH) linked to Ahrefs. While no direct malicious activity is detected, its subnet has a high abuse density. SOC teams should monitor for anomalous behavior in the subnet and validate the IP’s role with the organization.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.