51.89.129.207
IP Intelligence Dossier
Your IP: 216.73.216.123
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
IP Intelligence Briefing: 51.89.129.207
Date: 2026-06-09
---
**1. Risk Profile**
- Risk Score: 40 (Moderate Risk)
- Provider: OVH (CloudCompute)
- Ownership: Ahrefs Pte Ltd (AS16276, ARIN-registered)
- Geolocation: London, England, UK (plausible, 473 km from probe, 91ms RTT)
- Network Role: Hosting provider (OVH infrastructure, no residential/mobile)
---
**2. Threat Indicators**
- No direct malicious signals: No known attacker, spam, or Tor exit node.
- Subnet Risk: 51.89.129.207/24 has 61% abuse density (high_abuse classification), with 157 threat siblings.
- Neighbor Analysis: Subnet contains 100 IPs (96 medium-risk, 4 high-risk).
---
**3. Network & Subnet Context**
- Subnet: 51.89.129.207/24
- ASN: AS16276 (Ahrefs Pte Ltd)
- BGP: Prefix 51.89.0.0/16, route stability flagged as unstable.
- DNS: Resolves to `proxy-uk008-san207.ahrefs.net` (no email auth records).
---
**4. Historical Observations**
- Recent Activity:
- Geo validation consistent (London, UK).
- No changes in risk score or network classification.
- Long-term Trends: No persistent malicious behavior detected.
---
**5. Relationships & Dependencies**
- Linked Entities:
- Subnet OVH_282347344 (repeated in relationships).
- No correlated IPs or campaigns.
- Certificates/Services: No TLS certs or open ports detected.
---
**6. Recommended Actions**
- Monitor Subnet: Due to high abuse density, watch for lateral movements or anomalous traffic.
- Verify Ownership: Confirm Ahrefs Pte Ltd’s compliance with OVH’s hosting policies.
- Block High-Risk Neighbors: Consider isolating IPs with high risk scores in the 51.89.129.207/24 subnet.
- Check for Misconfigurations: Ensure no unintended exposure of cloud infrastructure.
---
Conclusion: The IP is associated with a legitimate hosting provider but resides in a subnet with elevated abuse risk. While no direct threats are detected, proactive monitoring of the subnet and its neighbors is advised.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ahrefs Pte Ltd Dmytro |
| ASN | AS16276 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | proxy-uk008-san207.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-uk008-san207.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
No certificate
Issued by —
N/A
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 20% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 22% | 10 | 16 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-22 09:13:36 UTC |
| Last Seen | 2026-06-28 19:00:36 UTC |
| Profile Built | 2026-06-29 07:04:26 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 24 |
🔍 21 signal types · 24 observations collected
This report is generated from 21+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.