54.38.147.136📋 Copy

# IP Intelligence Briefing: 54.38.147.136

Classification: Low Risk | Risk Score: 25 | Provider: OVH (ASN 16276)

## Executive Summary

IP 54.38.147.136 is a low-risk infrastructure address associated with Ahrefs Pte Ltd, operating from OVH cloud infrastructure in London, England. The IP shows no active threat indicators, no open services, and no known malicious activity. Historical observations indicate stable ownership and persistent cloud hosting patterns. No immediate action required.

## Technical Profile

Ownership & Infrastructure:

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276
• Network Block: 54.38.0.0/16 (BGP origin)
• Hosting Provider: OVH (CloudCompute infrastructure)
• Registration RIR: ARIN
• CIDR Block: 54.38.147.136/24

Geolocation:

• Country: United Kingdom (GB)
• Region: England
• City: London
• Geographic Confidence: Plausible (500.4 km distance validation)
• Average RTT: 89ms (5 probe attempts)

DNS Resolution:

• PTR Hostname: proxy-uk005-san136.ahrefs.net
• Domain: ahrefs.net
• Forward Resolution: Confirmed (1 hostname)
• Email Authentication: No SPF or DMARC records configured

Network Role:

• Infrastructure Type: Cloud Compute
• Classification: Hosting infrastructure
• Service Status: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None detected

## Threat Assessment

Current Risk Level: Low (Score: 25/100)

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• DNSBL Listings: 1 of 8 total lists
• Abuse Confidence Score: Not applicable

Campaign Correlation:

• Likelihood: None
• CERT Matches: 0
• Correlated IPs: 0
• Known Campaigns: None

## Neighborhood Analysis

Subnet: 54.38.147.136/24

Abuse Density Metrics:

• Subnet Abuse Density: 0.5 (Mixed classification)
• Total Siblings: 256
• Active Siblings: 167
• Threat Siblings: 128
• Inherited Risk Score: 20

Risk Distribution:

• High Risk: 0%
• Medium Risk: 85%
• Low Risk: 15%

Notable Neighbors:

• 54.38.147.0: Risk Score 40, Authority Score 50
• 54.38.147.1: Risk Score 50, Authority Score 50
• 54.38.147.2: Risk Score 40, Authority Score 50
• 54.38.147.3: Risk Score 40, Authority Score 50
• 54.38.147.4: Risk Score 40, Authority Score 50

## Historical Observations

Observation Count: 30 signals recorded

Temporal Stability:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No

Recent Signal Activity (2026-06-14):

• Subnet abuse density: 0.5 (Mixed)
• DNS resolution for ahrefs.net confirmed with CAA records
• Geographic inference: GB with 28% confidence
• Operator classification: Basic (0.4783 score)
• Overall profile confidence: 26% (multi-dimensional)

## Relationship Graph

Total Relationships: 69 entities

Primary Network Association:

• Multiple "Same Network" relationships with OVH_282347341
• Consistent infrastructure grouping across network

## Security Recommendations

Current Status: No specific actions recommended

Risk-Based Assessment:

• The IP shows no malicious indicators
• No firewall rules or blocking recommendations generated
• Operational context suggests legitimate hosting infrastructure

Recommended Monitoring:

• Monitor for changes in service availability or open ports
• Track DNS reputation for ahrefs.net domain
• Observe subnet-level threat activity changes
• Review historical patterns for emerging indicators

## Conclusion

IP 54.38.147.136 represents a legitimate cloud infrastructure asset operated by Ahrefs through OVH hosting. The low risk score, absence of threat indicators, and established DNS infrastructure support classification as benign. No immediate defensive action required. Continuous monitoring of neighborhood-level activity and operational changes is recommended for baseline tracking.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.