Report for IP: 51.89.38.138

Threat LevelHIGH50/1001 rule type
4 incidents on record · confirmed on global blocklist · persistent 23-day campaign · last seen 2d ago
PTR proxy-de000-cip11.ahrefs.net
Org / ASN Ahrefs Pte Ltd Dmytro
Country 🇬🇧 United Kingdom
City London, England
Timezone Europe/London

Attack Analysis

Listed on 1 threat-intelligence blocklist
  • FireHOL level2 — FireHOL level2 lists addresses seen attacking in the last 48 hours across many sensors. It is large and volatile: addresses enter and leave quickly, so on its own this is weaker, recent-activity evidence.
Only short-lived or context lists match, so this is weak evidence on its own.

Reports (4)

Date Severity Description
3 Nov 2026 - 10:10 low FireHOL level2 (48h recent-attacker feed, large & volatile)
2 Nov 2026 - 14:21 low FireHOL level2 (48h recent-attacker feed, large & volatile)
11 Oct 2026 - 14:18 low FireHOL level2 (48h recent-attacker feed, large & volatile)
11 Oct 2026 - 07:28 low FireHOL level2 (48h recent-attacker feed, large & volatile)

Related IPs — Same /24 Block (51.89.38.0/24)

51.89.38.133ELEVATED3 reports51.89.38.142ELEVATED4 reports51.89.38.143ELEVATED4 reports51.89.38.131MEDIUM1 report51.89.38.141MEDIUM1 report51.89.38.134MEDIUM3 reports51.89.38.139MEDIUM2 reports51.89.38.136MEDIUM1 report
Part of EagleEye Intelligence