54.38.147.46📋 Copy

IP Intelligence Briefing: 54.38.147.46

Date: 2026-06-08

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Provider: OVH (Cloud Compute)
• Ownership: Registered to *Ahrefs Pte Ltd* (AS16276).
• Geolocation: London, England (GB).
• Network Role: Cloud infrastructure, no open services detected.

---

**2. Threat Indicators**

• No direct malicious activity: No known malware, phishing, or spam associations.
• Historical Observations:

- 4 pulse alerts (confidence 0.75) linked to "Malware Distribution" and "Phishing Infrastructure" campaigns.

- Subnet abuse density: 0.375 (mixed risk, 19 medium-risk neighbors).

---

**3. Network Relationships**

• Same Network: Linked to 34 OVH subnets (OVH_282347341).
• Subnet Analysis:

- 54.38.147.46/24 contains 256 IPs.

- 96/100 neighbors flagged as medium/high risk.

- Inherited risk: 15 (moderate).

---

**4. Behavioral & Technical Data**

• Services: No open ports or TLS/HTTP activity detected.
• DNS: Resolves to `proxy-uk005-san46.ahrefs.net` (Ahrefs domain).
• BGP: Stable route (AS16276), no route changes in 30 days.

---

**5. Recommendations**

• Monitor Subnet: High abuse density in the 54.38.147.0/24 subnet warrants closer scrutiny.
• Verify Usage: Confirm if the IP is required for legitimate Ahrefs operations.
• Block/Restrict: Consider blocking if the IP is not essential, given the mixed-risk subnet.
• Check for Anomalies: Investigate the 4 pulse alerts (names omitted) for potential false positives or overlooked threats.

---

Conclusion: This IP is likely a legitimate cloud server, but its subnet contains significant risk. Prioritize monitoring and validate its necessity in your environment.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.