51.89.129.128📋 Copy

IP Intelligence Briefing: 51.89.129.128

Date: 2026-06-14

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Ahrefs Pte Ltd (AS16276, OVH provider)
• Geolocation: London, England (GB)
• Network Role: CloudCompute infrastructure (OVH)
• Threat Indicators: No malicious activity detected (no abuse confidence scores, no blacklists, no known campaigns).

---

**2. Network Context**

• Subnet: 51.89.129.128/24
• Subnet Risk: Mixed (abuse density: 48.83%), with 125/256 sibling IPs flagged as threats.
• Provider: OVH (AS16276), hosting infrastructure with no CDN/VPN/proxy indicators.
• DNS: Resolves to `proxy-uk008-san128.ahrefs.net` (Ahrefs-related hostname).

---

**3. Threat Observations**

• History:

- Recent DNS resolution activity (2026-06-14) linked to Ahrefs domains.

- Subnet abuse density increased over 30 days (0.4883).

- No persistent malicious activity or campaign associations.

• Threat Feeds: 1 DNSBL listing (out of 8 total lists), low severity.

---

**4. Relationships**

• Linked Entities:

- OVH network (AS16276)

- Ahrefs.net domain (PTR hostname)

- No direct ties to Tor, spam, or known attackers.

---

**5. Recommendations**

• Monitoring: Track subnet (51.89.129.128/24) for abnormal traffic patterns due to mixed abuse density.
• Firewall: No immediate action required for this IP (low risk).
• Validation: Verify DNS resolution against Ahrefs’ legitimate infrastructure to avoid false positives.

---

Conclusion:

This IP is part of Ahrefs’ cloud infrastructure, showing no signs of malicious activity. While its subnet has a moderate abuse density, the IP itself is not flagged as a threat. SOC teams should monitor the subnet but prioritize higher-risk neighbors identified in the neighborhood analysis.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.