51.195.244.210
IP Intelligence Briefing: 51.195.244.210
Date: 2026-05-31
---
**Key Risk Indicators**
- Risk Score: Moderate (40/100)
- Threat Indicators: No active malicious signals, spam, or known attacker associations.
- Network Role: CloudCompute (OVH infrastructure), no residential/mobile origin.
- Geolocation: London, England, UK (plausible, validated via RTT and DNS).
---
**Ownership & Infrastructure**
- ASN: 16276 (Ahrefs Pte Ltd Dmytro)
- ISP: OVH
- Subnet: 51.195.244.210/24
- Subnet Abuse Density: 0.5257 (high abuse classification), with 133/253 siblings flagged as threats.
- Cloud Hosting: Confirmed, no CDN/VPN/proxy detected.
---
**DNS & Network Relationships**
- DNS PTR: `proxy-uk000-san210.ahrefs.net` (linked to ahrefs.net)
- Neighbors: 100 IPs in subnet (98 medium-risk, 2 low-risk).
- Relationships:
- Same network (OVH_282347336)
- DNS association with ahrefs.net
---
**Observation History**
- Recent Activity (May 31, 2026):
- TLS/HTTP scans: No open ports or services detected.
- Traceroute: Plausible UK location (473.7 km, 96.4ms avg RTT).
- DNS resolution: Validated ahrefs.net with CAA records.
- Trend: No persistent malicious behavior; risk score stable.
---
**Actionable Insights**
1. Monitor Subnet: The /24 subnet has a high abuse density (0.5257). Investigate neighboring IPs for potential lateral movement or shared infrastructure risks.
2. Verify DNS Associations: Confirm legitimacy of `proxy-uk000-san210.ahrefs.net` to ensure no spoofing or misconfiguration.
3. Cloud Security: Ensure cloud compute resources (OVH) are configured with proper access controls and monitoring.
4. Geolocation Validation: Cross-check IP location with internal geolocation tools, given the moderate risk score and plausible UK origin.
---
Conclusion: No immediate threat detected, but the subnet’s high abuse density warrants closer scrutiny. The IP is likely legitimate infrastructure, but monitor for anomalies in the broader network.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ahrefs Pte Ltd Dmytro |
| ASN | AS16276 |
| Network Name | — |
| CIDR Block | 51.195.0.0/16 |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | proxy-uk000-san210.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-uk000-san210.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 24% | 2 | 3 |
| services | 15% | 2 | 2 |
| ownership | 27% | 3 | 4 |
| reputation | 31% | 1 | 3 |
| geolocation | 39% | 2 | 3 |
| Overall | 28% | 12 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-19 23:50:42 UTC |
| Last Seen | 2026-06-28 10:41:12 UTC |
| Profile Built | 2026-06-29 04:46:31 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 31 |
Full dossier details are available via our API.