51.89.129.17📋 Copy

IP Intelligence Briefing: 51.89.129.17/32

*Generated via IPDebrief tools: Profile, History, Relationships, and Neighborhood Analysis*

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership: Registered to Ahrefs Pte Ltd (AS16276, OVH provider).
• Geolocation: London, England, UK.
• Network Role: Cloud compute infrastructure (OVH), no public services detected.
• Threat Indicators: No malicious activity observed (no blacklists, campaigns, or spam).

---

**2. Observation History (30 Days)**

• Stability: Ownership and threat signals stable.
• Key Metrics:

- 0 threat observations, 0 ownership changes.

- DNS resolution consistent (linked to `proxy-uk008-san17.ahrefs.net`).

- BGP route stability confirmed (no recent anomalies).

---

**3. Network Relationships**

• Same Network: Linked to OVH subnet OVH_282347344 (51.89.0.0/16).
• DNS Associations:

- Directly resolves to `proxy-uk008-san17.ahrefs.net` (likely a proxy or CDN node).

• Certificates: No TLS certificates or HTTP services detected.

---

**4. Subnet Neighborhood Analysis**

• Subnet: 51.89.129.17/24.
• Abuse Density: 59.38% (High Abuse Classification).
• Neighbor Risk:

- 152/256 IPs in subnet flagged as high/medium risk.

- 14 low-risk IPs (including 51.89.129.17).

• Inherited Risk: 23 (moderate risk exposure due to subnet context).

---

**5. Recommendations**

• Monitoring: Track subnet activity for lateral movement or cluster-based threats.
• Firewall: Consider blocking high-risk neighbors (e.g., 51.89.129.0/24) to mitigate subnet-level risks.
• DNS: Validate `proxy-uk008-san17.ahrefs.net` for legitimate Ahrefs infrastructure.
• Context: While the IP itself is benign, its subnet’s high abuse density warrants closer scrutiny.

---

*End of Briefing*

*Generated by IPDebrief – Threat Intelligence for SOC Analysts*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.