51.89.129.44📋 Copy

# IP Intelligence Briefing: 51.89.129.44/32

## Executive Summary

Analysis of IP 51.89.129.44/32 indicates a low-risk infrastructure address associated with OVH cloud hosting in London, United Kingdom. The IP resolved to ahostname proxy-uk008-san44.ahrefs.net, affiliated with Ahrefs Pte Ltd Dmytro under ASN 16276. Risk scoring assigned a score of 25, classified as low risk with minimal operator concern.

## Infrastructure Profile

• Geolocation: London, GB (Europe/London timezone)
• Hosting Provider: OVH (ASN 16276)
• Infrastructure Type: CloudCompute, Hosting enabled
• DNS Record: proxy-uk008-san44.ahrefs.net
• Forward Resolution: Confirmed single hostname
• Network Classification: Cloud compute instance with no active open ports detected
• Route Stability: Route changes recorded within 30-day observation window; isRouteStable flag false

## Threat Assessment

No active threat indicators were identified during the analysis period. The IP was not flagged as a Tor exit node, known attacker, or spam source. Blacklist enumeration returned zero matches across threat feeds. Abuse confidence scoring remained unavailable. DNSBL listing showed 1 of 8 total lists, indicating minimal reputation impact.

## Historical Observations

Observation history captured 21 signals. Recent observations recorded subnet classification as mixed with abuse density of 0.4258 and inherited risk of 17. Geolocation inference placed the address in GB with 28% confidence at coordinates 55.38, -3.44. Provider classification consistently identified OVH with hosting enabled. Operator score remained at 0.2174 (Minimal) across multiple signal types.

## Neighborhood Analysis

Subnet 51.89.129.0/24 analysis revealed 100 sampled neighbors with a risk distribution of 0 high, 74 medium, and 26 low risk. Abuse density for the neighborhood remained at 0 per sampling. The target IP sits within this mixed-risk environment with 207 active siblings out of 256 total.

## Security Recommendations

• Traffic Action: Monitor but do not block. Low-risk classification supports continued observation.
• Firewall Rules: No blocking rules required. Standard cloud hosting traffic patterns observed.
• Threat Hunt: No additional hunting required for this specific IP address.
• Subnet Monitoring: Monitor related neighbors in 51.89.129.0/24 subnet, particularly the 74 medium-risk IPs.

## Classification

• Risk Level: Low (Score: 25)
• Provider Risk: Minimal
• Authority Risk: Minimal
• Infrastructure: Legitimate cloud hosting with Ahrefs branding
• Threat Status: Clean

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.