51.89.129.31📋 Copy

IP Intelligence Briefing: 51.89.129.31

Date: 2026-06-14

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Ownership: Registered to Ahrefs Pte Ltd (AS16276, OVH provider).
• Geolocation: London, England, UK (plausible, 473.7 km from probe).
• Network Role: Hosting infrastructure (OVH network, no public services).
• Threat Indicators: No malicious activity, no blacklisted domains, no spam, or known attacker associations.

---

**2. Observation History**

• Stability: Stable over 30 days (0 route changes).
• DNS Activity: Resolves to `proxy-uk008-san31.ahrefs.net` (Ahrefs subdomain).
• Geolocation Consistency: Validated with 5 probes (avg RTT: 91.8ms).
• Subnet Abuse Density: 48.83% (mixed classification, 125/256 sibling IPs flagged as threats).

---

**3. Relationships**

• Network Affiliation: Part of OVH AS16276, shared BGP prefix `51.89.0.0/16`.
• Connected Entities:

- Linked to ahrefs.net (DNS domain).

- No direct ties to known malicious organizations, campaigns, or C2 servers.

---

**4. Neighborhood Analysis**

• Subnet: `51.89.129.31/24` (256 IPs).
• Risk Distribution:

- 62 IPs flagged as medium risk (avg score 40–50).

- 38 IPs low risk.

• Notable Neighbors:

- Multiple IPs with high authority scores (50) but no confirmed malicious activity.

- Subnet abuse density suggests potential for lateral movement or shared infrastructure risks.

---

**5. Recommendations**

• Monitor Subnet: Track activity in `51.89.129.0/24` for anomalies, given moderate abuse density.
• Verify DNS: Confirm `ahrefs.net` DNS records for spoofing or misconfiguration risks.
• Baseline Behavior: No immediate action required for 51.89.129.31, but maintain watch for unexpected service changes.

---

Conclusion: This IP is a legitimate hosting server owned by Ahrefs, with no direct threat indicators. Focus on subnet-level monitoring due to elevated abuse density in its network.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.