51.89.129.65📋 Copy

Threat Intelligence Briefing: IP 51.89.129.65/32

Overview

• Risk Profile: Low risk (riskScore: 25/100). No malicious indicators, abuse confidence, or known campaigns.
• Ownership: Registered to Ahrefs Pte Ltd (ASN 16276, OVH provider).
• Geolocation: London, England, UK. Geo-validation confirmed with 473.7 km distance and 89.8 ms average latency.
• Network Role: Hosting infrastructure (OVH cloud), no CDN/VPN/proxy activity.

Threat Observations

• No Malicious Activity: No indicators of spam, attacks, or blacklisted status.
• DNS Associations: Linked to hostname `proxy-uk008-san65.ahrefs.net` (Ahrefs service).
• Historical Signals: Stable over 30 days; no abrupt changes in risk or network behavior.

Network Relationships

• Subnet: 51.89.129.0/24.
• Neighbors: 248 IPs in subnet (77% low risk, 23% medium risk). Abuse density: 0.2298 (moderate).
• Shared Network: OVH ASN 16276, with stable BGP routes (AS path: 34549 16276).

Recommendations

• Monitoring: Track subnet abuse density and monitor for unexpected DNS or service changes.
• Firewall: No immediate blocking required. Consider allow-listing based on OVH infrastructure if relevant.
• Context: IP is part of Ahrefs’ hosting infrastructure; no evidence of malicious use.

Conclusion

This IP is associated with a legitimate hosting provider and shows no signs of malicious activity. While the subnet has a moderate abuse density, the IP itself remains low risk. SOC teams should maintain standard monitoring practices for network anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.