51.222.168.79📋 Copy

IP Intelligence Briefing: 51.222.168.79

Date: 2026-06-15

---

**1. Core Profile**

• Risk Score: Moderate (40/100)
• Ownership: Hosted by OVH (ASN 16276), registered to Dmytro, Ahrefs Pte Ltd.
• Geolocation:

- Country: Canada (CA)

- Region: QC (Quebec)

- City: Singapore (discrepancy noted; geoPlausible: False)

• Network Role: CloudCompute infrastructure (firewalled, no public services).
• Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).

---

**2. Observation History**

• Temporal Stability: No significant changes in risk scores (averaged 40) since June 13, 2026.
• Threat Persistence: Zero days of persistent malicious activity.
• Geolocation Consistency: RTT anomalies (29ms vs. expected 112ms for 5,598km distance) suggest potential spoofing or misconfigured routing.

---

**3. Network Relationships**

• Subnet: 51.222.168.0/24 (OVH-CUST-281059697)
• Neighbor Risk:

- Abuse Density: 64.45% (high-risk subnet).

- Active IPs: 210/256 in subnet.

- Threat Siblings: 165 IPs flagged as risky.

• Inherited Risk: 25% (moderate) due to subnet context.

---

**4. Actionable Insights**

• Monitor Subnet: The 51.222.168.0/24 subnet has a high abuse density. Investigate neighboring IPs for potential lateral movement or shared infrastructure risks.
• Geolocation Discrepancy: The IP’s reported location (Canada) conflicts with its proximity to Singapore. Verify if this is a misconfiguration or spoofing attempt.
• Threat Mitigation: While the IP itself is not malicious, consider blocking or rate-limiting traffic from this subnet if it’s part of a larger attack pattern.

Recommendation: Flag the subnet for closer scrutiny and validate geolocation data. No immediate action required for the IP itself, but monitor for anomalies.

---

*Generated using IPDebrief threat intelligence tools.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.