51.89.129.166📋 Copy

INTELLIGENCE BRIEFING: 51.89.129.166/32

---

EXECUTIVE SUMMARY

Intellect 51.89.129.166 presents as a moderate risk (score: 40) hosting infrastructure address operated by OVH ASN 16276. The IP resolves to an Ahrefs domain (proxy-uk008-san166.ahrefs.net) but exhibits hosting characteristics with firewall protection and no open services. While the IP itself shows minimal direct threat indicators, the /24 subnet demonstrates elevated abuse density (0.707) with 181 of 182 active sibling IPs flagged as threats.

---

OWNERSHIP & GEOLOCATION

• ASN: 16276 (OVH)
• Organization: Ahrefs Pte Ltd Dmytro
• Location: London, England (GB)
• Registry: ARIN
• BGP Prefix: 51.89.0.0/16

---

NETWORK INFRASTRUCTURE

• Infrastructure Type: Cloud computing / Hosting
• Service Status: Firewalled / No Services
• Open Ports: None detected
• DNS: proxy-uk008-san166.ahrefs.net (ahrefs.net)
• Forward Resolution: 1 hostname confirmed
• Reverse DNS: proxy-uk008-san166.ahrefs.net
• TLS Certificates: None present
• Network Classification: Hosting provider

---

THREAT INDICATORS

• Risk Score: 40 (Moderate)
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Affiliation: None detected
• Persistent Malicious Activity: No

---

SUBNET ANALYSIS (/24: 51.89.129.0.0/24)

• Abuse Density: 0.707 (High)
• Classification: High Abuse
• Total Siblings: 256
• Active Siblings: 182
• Threat Siblings: 181
• Inherited Risk Score: 28

Assessment: The /24 subnet exhibits significant abuse concentration. The high abuse density and threat sibling count indicate potential infrastructure sharing with compromised hosts, though the target IP itself maintains lower risk metrics.

---

OBSERVATION HISTORY

• Total Observations: 22
• Most Recent: June 20, 2026
• Ownership Changes: 0
• Threat Persistence Days: 0
• Observation Timeline: Consistent cloud/hosting classification with stable infrastructure characteristics

---

RELATIONSHIP MAPPING

• Total Relationships: 46
• Primary Association: Same Network (OVH_282347344)
• Network Classification: OVH hosting infrastructure

---

RECOMMENDED ACTIONS

Monitor: Continue surveillance due to high-abuse neighborhood context.

Block Criteria: Not recommended at this time; no direct threat indicators.

Firewall Rules: Standard egress/ingress rules apply; no specific blocking required for this IP.

Investigative Notes: While the IP resolves to legitimate Ahrefs infrastructure, the subnet's abuse density warrants awareness. Monitor for any emergence of direct threat indicators or service changes.

---

Report Generated: IPDebrief Intelligence Platform

Data Freshness: Current

Classification: Defensive Intelligence

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.