51.222.95.196📋 Copy

IP INTELLIGENCE BRIEFING: 51.222.95.196/32

OVERVIEW

IP address 51.222.95.196 is assigned to OVH SAS (ASN 16276) under organization "Dmytro, Ahrefs Pte Ltd" (OVH-CUST-281059689). The IP is classified as Moderate Risk with a risk score of 40. The address resolves to ahosted domain proxy-ca010-san196.ahrefs.net under the ahrefs.net domain, indicating legitimate hosting infrastructure.

NETWORK CLASSIFICATION & GEOLOCATION

The IP is identified as cloud compute infrastructure with hosting capabilities. Geolocation data indicates Canada (QC region) with Singapore coordinates in one source; the 3000km accuracy radius suggests confidence limitations. The subnet 51.222.95.0/24 is classified as high-abuse density (0.5508), with 141 of 237 active sibling IPs flagged as threats.

THREAT ASSESSMENT

No active threat indicators detected. The IP is not a known attacker, Tor exit node, or spam source. Blacklist count is 0 with no known campaign associations. However, the parent subnet shows elevated abuse density (0.55), indicating this cloud hosting environment may host multiple entities with varying risk profiles.

HISTORICAL PATTERN ANALYSIS

Analysis of 19 observation records reveals stable characteristics with minimal risk evolution. Subnet abuse density has remained consistent between 0.53 and 0.55 over recent observations. No significant risk escalation or deprecation observed.

RELATIONSHIP MAPPING

The IP has 46 detected relationships, predominantly network-level associations with OVH-CUST-281059689. No certificate, hostname, or organizational cross-references detected beyond the primary network assignment.

RECOMMENDED SECURITY ACTIONS

Based on risk profile and neighborhood context, the following firewall rules are recommended:

• iptables: `iptables -A INPUT -s 51.222.95.196 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 51.222.95.196 drop`
• nginx: `deny 51.222.95.196;`
• Cloudflare WAF: Block with expression `ip.src eq 51.222.95.196`
• AWS WAF: Add IP 51.222.95.196/32 to block list

ANALYST NOTES

While the IP shows no direct threat indicators, the high-abuse classification of the parent /24 subnet warrants contextual awareness. The moderate risk score (40) reflects the cloud hosting environment's inherent risk profile. Consider implementing subnet-level monitoring for 51.222.95.0/24 given the elevated abuse density (0.5508) affecting 141 sibling IPs.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.