51.222.95.145📋 Copy

# IP Intelligence Briefing: 51.222.95.145

## Executive Summary

IP address 51.222.95.145 was classified as Moderate Risk with an overall risk score of 40. The IP belongs to OVH hosting infrastructure and resolved to a hostname within the Ahrefs domain. The IP operates within a high-abuse subnet (51.222.95.0/24) with an abuse density of 0.7266 and 186 threat-sibling IPs identified.

## Ownership and Network Classification

The IP was attributed to ASN 16276, organization "Dmytro, Ahrefs Pte Ltd," under network name OVH-CUST-281059689. The infrastructure was classified as cloud compute hosting with firewalled/no-services status. Geolocation data indicated CA region with Singapore city placement, though geo-plausibility validation returned false.

## Technical Profile

DNS resolution returned proxy-ca010-san145.ahrefs.net. Forward resolution was confirmed for one hostname. Email authentication records (SPF, DMARC) were absent. No open ports, TLS certificates, or HTTP services were detected. The IP was not identified as a Tor exit node, proxy, VPN, or spam source.

## Threat Indicators

No active threat indicators were observed. The IP was not flagged as a known attacker, and no known campaigns were associated. Blacklist count remained at zero. Pulsedive risk assessment was unavailable.

## Neighborhood Analysis

The /24 subnet (51.222.95.0/24) exhibited high abuse classification with 0.7266 abuse density. Analysis revealed 256 total siblings with 206 active siblings and 186 threat siblings. Risk inheritance score was calculated at 29. Neighbor analysis showed 100 neighbors, with risk distribution indicating 100 medium-risk and zero high or low-risk neighbors.

## Signal History

Historical data indicated 21 total observations with the most recent signal recorded on 2026-06-20. Observations showed minimal threat persistence (0 threat persistence days). One threat observation was recorded. The IP was not flagged as persistently malicious.

## Relationship Graph

Relationship analysis returned 44 relationships, all categorized as "Same Network" entries pointing to OVH-CUST-281059689. No cross-network or organizational relationships were identified.

## Operational Assessment

The IP demonstrated cloud hosting characteristics with no active service banners. The subnet context suggests elevated risk due to high abuse density and significant threat sibling presence. Despite moderate individual risk scoring, the network environment warrants enhanced scrutiny.

## Recommended Actions

No specific firewall or mitigation rules were generated based on the risk profile. SOC teams should monitor subnet-level activity and consider applying broader subnet-based controls given the high-abuse classification and 186 threat siblings in the 51.222.95.0/24 range.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.