51.89.129.137📋 Copy

IP Intelligence Briefing: 51.89.129.137

Date: 2026-06-07

**Profile Summary**

• Risk Score: 25 (Low Risk)
• Ownership: Registered to Ahrefs Pte Ltd Dmytro (ASN 16276, OVH provider).
• Geolocation: London, England, UK (plausible via inferred GPS coordinates).
• Network Role: CloudCompute instance (OVH-hosted, no CDN/VPN/Tor).
• Services: No open ports or TLS certificates detected. DNS resolves to `proxy-uk008-san137.ahrefs.net`.

**Threat Indicators**

• No Malicious Signals: No threat feeds, blacklists, or spam indicators detected.
• Behavioral Analysis: No honeypot hits, enumeration activity, or suspicious banners.
• Historical Trends: Stable risk profile with no observed changes in 30 days.

**Network Relationships**

• Subnet: 51.89.129.137/24 (OVH infrastructure).
• Neighbors: 256 total IPs in subnet; 98 active, 115 flagged as high/medium risk (abuse density: 0.45).
• DNS Associations: Resolves to Ahrefs-related hostnames, but DNS queries to internal IPs (e.g., 192.168.x.x) timed out.

**Key Findings**

1. Cloud Hosting: The IP is part of OVH's cloud infrastructure, likely used for Ahrefs' proxy services.

2. Subnet Risk: While the IP itself is low risk, its subnet has moderate abuse density (13/100 neighbors flagged).

3. DNS Anomalies: DNS resolution issues (timeouts) may indicate misconfiguration or internal network segmentation.

**Recommended Actions**

• Monitor Subnet: Track activity in 51.89.129.0/24 for unusual traffic patterns.
• Verify DNS Configuration: Investigate DNS timeouts to ensure no internal network exposure.
• Maintain Baseline: No immediate firewall rules needed, but continue monitoring for changes.

Conclusion: This IP is a legitimate cloud-hosted proxy service with no direct malicious activity. Focus on subnet-level anomalies and DNS health.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.