51.89.129.109📋 Copy

IP Intelligence Briefing: 51.89.129.109

Date: 2026-06-14

---

**1. Core Profile**

• Risk Score: Low Risk (25/100) | No threat indicators detected.
• Ownership: Owned by Ahrefs Pte Ltd Dmytro (ASN 16276, OVH provider).
• Geolocation: London, England (GB), inferred via RTT and DNS validation.
• Network Role: Hosting provider (OVH), no exposed services (open ports), firewalled.
• Threat Context: No malicious campaigns, spam, or blacklisted activity detected.

---

**2. Observation History**

• Latest Activity: June 2026, with consistent geolocation validation (RTT: 87–96 ms, ~474 km from probe).
• Stability: Subnet (51.89.129.0/24) shows mixed classification; 48.83% abuse density, 125/256 IPs flagged as threats.
• Behavioral Insights: No honeypot hits or enumeration activity.

---

**3. Relationships & Network Context**

• Provider: OVH (ASN 16276), no CDN/VPN/mobile indicators.
• Subnet Neighbors:

- 135 active IPs in 51.89.129.0/24.

- 125 threat-sibling IPs (48.83% abuse density).

- High-risk neighbors (riskScore ≥ 40) dominate the subnet.

• Certificates/DNS: No TLS certs or DNS anomalies detected.

---

**4. Recommendations**

• Monitor Subnet: The 51.89.129.0/24 subnet has elevated abuse density; investigate neighboring IPs for potential lateral movement or compromised hosts.
• Verify Hosting Compliance: Confirm Ahrefs’ hosting practices align with security standards, given the subnet’s mixed risk profile.
• Restrict Access: If this IP hosts services, ensure firewall rules block unnecessary ports and enforce strict access controls.
• Continuous Monitoring: Track changes in subnet abuse density and threat indicators over time.

---

Conclusion: While 51.89.129.109 itself is low-risk, its subnet exhibits significant abuse activity. SOC teams should prioritize monitoring the broader network for correlated threats.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.