51.89.129.123📋 Copy

# IP Intelligence Briefing: 51.89.129.123/32

Classification: Moderate Risk | Report Date: Current

## Executive Summary

IP address 51.89.129.123 is a cloud computing infrastructure endpoint associated with Ahrefs Pte Ltd Dmytro (ASN 16276). The IP presents a moderate risk score of 40/100 and is hosted on OVH infrastructure in London, UK. While the IP itself shows no active malicious indicators, it resides within a high-abuse-density subnet (51.89.129.0/24) with 74.61% abuse density classification.

## Infrastructure Profile

• IP Address: 51.89.129.123/32
• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276 (OVH)
• Geolocation: London, England, GB
• Infrastructure Type: CloudCompute (Hosting)
• Network Role: Firewalled / No Services Detected
• DNS Resolution: proxy-uk008-san123.ahrefs.net

## Threat Assessment

• Overall Risk Score: 40/100 (Moderate Risk)
• Known Threats: None detected
• Campaign Association: None
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Tor/Proxy/VPN: Negative indicators
• Open Ports: None observed (fully firewalled)
• TLS Certificates: None detected

## Neighborhood Analysis

The IP belongs to subnet 51.89.129.0/24 with concerning abuse characteristics:

• Abuse Density: 0.7461 (High Abuse Classification)
• Total Siblings: 256
• Active Siblings: 194
• Threat Siblings: 191
• Inherited Risk Score: 29/100
• Risk Distribution: 55 Medium Risk, 45 Low Risk IPs in /24

## Observation History

22 observations recorded with recent activity from June 20, 2026. Signals tracked include:

• Provider classification (OVH cloud hosting)
• Geolocation validation (GB, London)
• Subnet abuse density monitoring
• Operator score: 0.2174 (Minimal)
• No observed threat persistence or malicious activity escalation

## Recommended Actions

Based on risk profile and neighborhood context, the following firewall rules are recommended:

## Intelligence Notes

• The IP is part of a known hosting provider network with significant abuse density in the /24 subnet
• No direct threat indicators (scans, attacks, malicious DNS, etc.) were observed
• The association with Ahrefs Pte Ltd Dmytro suggests legitimate use, but the neighborhood context warrants caution
• Recommended monitoring approach: Block at perimeter level but monitor for any service activity emergence
• Consider reviewing adjacent IPs in the 51.89.129.0/24 subnet if lateral threat activity is suspected

---

*Intelligence generated by IPDebrief platform for authorized defensive security operations.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.