5.39.109.180📋 Copy

IP Intelligence Briefing: 5.39.109.180

Date: 2026-06-11

---

**1. Threat Profile**

• Risk Score: 25 (Low Risk)
• Threat Indicators: No malicious activity detected (no malware, phishing, or C&C indicators).
• DNSBL Listings: Listed in 8 DNSBLs (1 high-severity, 7 medium), but no active threats observed.
• Geolocation: Registered to OVH (France), but geolocated to New York, USA (potential misattribution or proxy).

---

**2. Network & Ownership**

• ASN: AS16276 (OVH)
• Organization: Ahrefs Pte Ltd (Dmytro)
• Subnet: 5.39.109.160/27 (23 sibling IPs; 1 low-risk, 22 medium-risk neighbors).
• Network Role: Cloud Compute (OVH infrastructure), no residential/mobile origin.

---

**3. Observation History (Last 30 Days)**

• Key Signals:

- DNS: Resolves to `proxy-fr009-san180.ahrefs.net` (Ahrefs infrastructure).

- Geolocation: Consistently reported as France (OVH data centers).

- Threat Feeds: No active threats (0 malware, 0 C&C, 0 spam).

• Trend: Stable; no significant changes in risk or abuse activity.

---

**4. Relationships & Context**

• Linked Entities:

- Subnet: 5.39.109.160/27 (OVH network).

- Hostname: `proxy-fr009-san180.ahrefs.net` (Ahrefs proxy server).

• Abuse Density: 0% (clean subnet).

---

**5. Actionable Insights**

• No Immediate Threat: Low-risk score and no active indicators suggest benign activity.
• Monitor DNSBL Listings: Investigate why this IP is listed in DNSBLs (false positives or misconfigured services?).
• Verify Geolocation: Discrepancy between OVH (France) and geolocation (USA) may indicate proxy use or data center routing.
• Network Segmentation: Consider isolating this subnet if it hosts sensitive services.

Recommendation: No immediate mitigation required. Continue monitoring for anomalies in DNS or threat feeds.

---

*Generated via IPDebrief threat intelligence platform.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.