51.195.244.147📋 Copy

IP Intelligence Briefing: 51.195.244.147

Date: 2026-05-31

---

**1. Risk Assessment**

• Overall Risk: Moderate (Risk Score: 40)
• Provider Score: 0 (OVH CloudCompute)
• Subnet Abuse Density: High (0.5257)
• Neighbor Risk Distribution: 98% Medium/Low, 2% High

---

**2. Ownership & Geolocation**

• Organization: Ahrefs Pte Ltd (Dmytro)
• ASN: 16276 (OVH)
• Geolocation: London, England, GB (Inferred via DNS signals)
• Network Role: CloudCompute (OVH)

---

**3. Threat Indicators**

• No Direct Threats: No malware, spam, or malicious campaigns linked.
• DNS Associations: Linked to `proxy-uk000-san147.ahrefs.net` (ahrefs.net).
• Subnet Risks: 133/253 siblings flagged as threats (high abuse density).

---

**4. Network Behavior**

• Services: No open ports or TLS certificates detected.
• Routing: BGP prefix `51.195.0.0/16` (OVH), stable route.
• Subnet Neighbors:

- 140 active IPs in `/24` subnet.

- 133 IPs flagged as malicious or suspicious.

---

**5. Temporal Trends**

• Observation History:

- Subnet abuse density increased from 0.45 to 0.5257 in 30 days.

- No persistent malicious activity detected.

---

**6. Recommendations**

• Monitor Subnet: High abuse density suggests potential lateral movement risks.
• Verify DNS: Confirm `ahrefs.net` DNS records for spoofing or misconfiguration.
• Restrict Access: Consider firewall rules to limit traffic to trusted sources (e.g., `iptables -A INPUT -s 51.195.244.147/32 -j DROP`).

Note: The IP is associated with a legitimate cloud provider but resides in a subnet with significant abuse. Further investigation into neighbor activity is advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.