51.89.129.103📋 Copy

## IP Intelligence Briefing: 51.89.129.103/32

Classification: Operational Infrastructure Asset

---

Executive Summary

IP address 51.89.129.103 resolves to OVH cloud infrastructure in London, England. The address maintains a Low Risk classification (Risk Score: 25) and demonstrates consistent operational behavior. No active threat indicators, malicious campaigns, or blacklist associations were identified.

---

Ownership and Network Infrastructure

The IP belongs to Ahrefs, a legitimate SEO and web analytics services company, operating through OVH cloud infrastructure. The network exhibits route stability with 0 route changes over 30 days.

---

DNS and Service Analysis

DNS resolution is consistent with Ahrefs infrastructure. No active services are exposed on the IP address. Email authentication records (SPF/DMARC) are not configured for the domain.

---

Threat Intelligence Assessment

Current Risk Profile:

• Risk Score: 25/100 (Low Risk)
• Reputation: Low Risk
• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Control Plane Indicators:

• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.4348 (Basic)
• Route Stability: Stable
• RPKI State: Not evaluated

---

Neighborhood Analysis

Subnet: 51.89.129.0/24

• Total Siblings: 256
• Active Siblings: 207
• Threat Siblings: 106
• Abuse Density: 0.4141
• Classification: Mixed
• Inherited Risk: 16

The /24 subnet contains 106 threat-related siblings with 74 medium-risk and 26 low-risk neighbors. This indicates an elevated but not anomalous abuse density typical of OVH cloud hosting environments.

---

Observation History

Total Observations: 23

Recent signal activity indicates:

• Abuse Density: Consistent at 0.4141
• Network Classification: Stable CloudCompute (OVH)
• Operator Score: 0.35 (Basic)
• Geolocation Confidence: 0.28 (GB with multi-signal inference)

No persistent malicious behavior detected. The IP demonstrates operational stability without threat persistence indicators.

---

Relationships

Total Relationships: 81

Primary relationship type: Same Network (OVH_282347344) - multiple instances indicating infrastructure clustering within the OVH network. No direct attack relationships or campaign correlations identified.

---

Recommended Actions

No immediate security actions required. The IP address represents legitimate Ahrefs infrastructure with no threat indicators. Standard monitoring and logging practices are sufficient.

---

Analyst Notes

This IP address is operational infrastructure for Ahrefs, a recognized web analytics and SEO services provider. The presence of threat siblings in the /24 subnet reflects OVH's hosting density rather than a localized threat campaign. The IP should be monitored as part of normal traffic analysis but does not warrant blocking or escalation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.