54.39.0.96📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 54.39.0.96/32

Classification: Moderate Risk (Score: 40)

Date: 2026-06-20

## EXECUTIVE SUMMARY

IP address 54.39.0.96 is a cloud-hosted infrastructure address associated with OVH network (ASN 16276), registered to Ahrefs Pte Ltd. The address exhibits moderate risk characteristics with a risk score of 40/100. The /24 subnet (54.39.0.0/24) demonstrates high abuse density (0.7188), with 184 of 227 active sibling IPs flagged as threat sources. No open services or active threat indicators detected on this specific IP.

## OWNERSHIP AND INFRASTRUCTURE

• ASN: 16276 (OVH SAS)
• Organization: Dmytro, Ahrefs Pte Ltd
• CIDR Block: 54.39.0.0/24
• Registry: ARIN (delegation age: 9,251 days)
• Infrastructure Type: CloudCompute
• Network Classification: Hosting/Cloud Infrastructure
• Control Plane: BGP prefix 54.39.0.0/16, AS Path: 1403 16276, Route Status: Stable

## GEOLOCATION DATA

• Reported Location: Canada (QC), Beauharnois
• Geolocation Consensus: True (1 source)
• GeoValidation Status: Flagged - RTT anomaly detected. Observed RTT 29ms vs minimum possible 112.6ms for 5,629km distance.
• DNS Resolution: proxy-ca004-san96.ahrefs.net (ahrefs.net domain)
• Forward DNS Confirmed: False

## THREAT INDICATORS

• Abuse Confidence Score: Null
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Blacklist Count: 0
• Threat Feeds: None
• Campaign Correlation: None detected
• DNSBL Status: Listed on 1 of 8 DNSBL lists

## NETWORK NEIGHBORHOOD ANALYSIS

• Subnet: 54.39.0.0/24
• Abuse Density: 0.7188 (High Abuse Classification)
• Total Siblings: 256
• Active Siblings: 227
• Threat Siblings: 184
• Neighbor Risk Distribution: High: 0, Medium: 41, Low: 59

## SERVICE AND PORT STATUS

• Open Ports: None detected
• HTTP Services: None
• TLS Certificate: None
• Server Banner: None
• Network Role: Firewalled / No Services

## OBSERVATION HISTORY

Total observations: 25 (as of 2026-06-20)

• ASN Resolution: Consistently resolved to ASN 16276 (OVH), registered 2001-02-15
• Subnet Classification: High abuse density (0.7188) consistently observed
• Provider Classification: OVH hosting infrastructure
• Threat Persistence: 0 days (no persistent malicious activity detected)

## RELATIONSHIP MAPPING

• Total Relationships: 48
• Primary Association: Same Network (OVH-CUST-281059683)
• Related Entities: Network-level associations to OVH customer block

## RECOMMENDED ACTIONS

No specific firewall or blocking rules recommended at this time. The IP exhibits moderate risk with no active threat indicators. Monitor subnet-level activity given high abuse density context.

---

*Intel generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.