51.222.95.177📋 Copy

IP Intelligence Briefing: 51.222.95.177

*Generated via IPDebrief tools: Profile, History, Relationships, Neighbors*

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership:

- ASN: 16276 (OVH)

- Organization: Dmytro, Ahrefs Pte Ltd

- Subnet: 51.222.95.0/24 (OVH-CUST-281059689)

• Geolocation:

- Country: Canada (CA) | City: Singapore (plausible inconsistency)

- Latitude/Longitude: Unavailable

- Accuracy Radius: 3,000 km

• Threat Indicators:

- No malicious indicators, spam, or known attacker associations.

- DNS: PTR hostname `proxy-ca010-san177.ahrefs.net` (linked to `ahrefs.net`).

- No TLS certificates, open ports, or server banners detected.

---

**2. Network Context**

• Network Role:

- CloudCompute (OVH infrastructure) | Hosting Provider

- Subnet Abuse Density: High (0.6875)

• Subnet Neighbors:

- 256 total IPs in 51.222.95.0/24.

- 196 active IPs, 176 flagged as malicious (68.75% abuse density).

- Neighbor Risk Distribution:

- 85 IPs: Medium Risk (40–60)

- 15 IPs: Low Risk (0–20)

- 0 IPs: High Risk (>60)

• Routing:

- BGP Prefix: 51.222.0.0/16

- Route Stability: Unstable (fluctuations detected in 30 days).

---

**3. Temporal Observations**

• Latest Activity:

- Observed on 2026-06-18 (minimal risk score, 0.2174 operator score).

- Geolocation inconsistency: RTT (26ms) conflicts with 5,598km distance.

• Historical Trends:

- No persistent malicious activity; threat observation count: 1.

- Subnet abuse density increased from 0.6875 (June 14) to 0.6875 (June 18).

---

**4. Relationships & Dependencies**

• Linked Entities:

- Same Network: 43 relationships (OVH-CUST-281059689).

- DNS: `ahrefs.net` (no email auth records, no SPF/DKIM).

- No known campaigns, certificates, or peer IPs.

• Control Plane:

- RPKI State: Unverified | IRR Consistency: Unverified

- DNSSEC Valid: Yes | CAA Record: Present

---

**5. Recommendations**

• Monitor Subnet: High abuse density in 51.222.95.0/24 suggests potential compromise.
• Verify Geolocation: Investigate CA/Singapore inconsistency; possible spoofing.
• Check Ahrefs.net: Analyze linked domains for phishing or malicious activity.
• Network Segmentation: Consider isolating this subnet due to elevated risk.
• Route Stability: Investigate BGP route fluctuations for potential hijacks.

---

*End of Briefing*

*Generated by IPDebrief (© 2026 Jason Alberino)*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.