54.38.147.111📋 Copy

IP Intelligence Briefing: 54.38.147.111

Date: June 1, 2026

---

**1. Risk Profile**

• Overall Risk Score: Low (25/100)
• Provider Score: 0 (OVH, cloud infrastructure)
• Authority Score: 0 (no malicious authority indicators)
• Stability: Unstable (route stability score: 0.2174)
• Threat Indicators: No malware, spam, or attacker associations detected.

---

**2. Ownership & Geolocation**

• Organization: Ahrefs Pte Ltd (Dmytro)
• ASN: 16276 (OVH)
• Geolocation: London, England, UK (inferred via geolocation signals; accuracy radius: 750km).
• Network Role: CloudCompute (OVH-hosted, no residential/mobile carrier).

---

**3. Network Activity**

• Subnet: 54.38.147.111/24
• Subnet Abuse Density: 38.28% (moderate risk; 98 active IPs, 98 flagged as threats).
• Neighbors:

- 16 IPs with medium/high risk scores (25–50).

- Subnet includes mixed-use (legitimate/cloud services).

---

**4. Threat Observations**

• No Malicious Activity: No DNS, TLS, or service anomalies detected.
• Historical Signals:

- Scans detected (ports scanned, but no open services).

- Geolocation inferences (London, UK) with low confidence (0.28).

---

**5. Relationships**

• DNS Associations: Linked to `proxy-uk005-san111.ahrefs.net` (Ahrefs proxy server).
• Network Relationships:

- Same subnet as 98 IPs, 98 flagged as threats.

- No direct connections to known malicious entities.

---

**6. Recommendations**

• Monitor Subnet: High abuse density in the 54.38.147.0/24 subnet; watch for lateral movement or anomalies.
• Verify Traffic Patterns: Ensure cloud instance (OVH) traffic aligns with expected usage for Ahrefs’ proxy service.
• No Immediate Action Required: No malicious indicators detected, but subnet risk warrants continued observation.

---

Source: IPDebrief Threat Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.