54.39.136.111📋 Copy

IP Intelligence Briefing: 54.39.136.111

*Generated via IPDebrief tools: Profile, History, Relationships, Neighbors*

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Provider: OVH (ASN 16276)
• Geolocation: Canada (QC, Beauharnois)
• Network Role: CloudCompute Hosting
• Threat Status: No active malware, spam, or attacker indicators.
• DNS: Linked to `proxy-ca002-san111.ahrefs.net` (no malicious domains).
• Services: No open ports or TLS/HTTP signatures detected.

---

**2. Observation History**

• Latest Activity: 2026-06-16 (minimal risk, low confidence).
• DNSBL Listing: 1/8 DNSBL entries (moderate risk, but no recent spikes).
• Ownership Stability: No changes in 30 days; persistent benign behavior.
• Threat Persistence: Zero observed malicious campaigns or persistence.

---

**3. Relationships**

• Network: Part of OVH-CUST-281059681 (54.39.136.0/24).
• DNS Associations:

- `proxy-ca002-san111.ahrefs.net` (no abuse indicators).

• No Malicious Links: No connections to known C2 servers, malware, or phishing domains.

---

**4. Subnet Neighbors**

• Subnet: 54.39.136.0/24 (100 IPs).
• Risk Distribution:

- 98 IPs: Low risk (avg. score 40).

- 2 IPs: Medium risk (score 40).

• Abuse Density: 0% (no malicious activity in subnet).

---

**5. Actionable Insights**

• Monitor: Track DNSBL status and subnet neighbors for anomalies.
• Firewall: No immediate blocking needed; focus on high-risk neighbors.
• Context: Likely benign cloud infrastructure (OVH hosting).

Conclusion: 54.39.136.111 is a low-risk IP with no current threat indicators. However, its DNSBL listing and subnet neighbors warrant periodic monitoring. No immediate defensive action required.

*Generated by IPDebrief – Threat Intelligence for SOC Analysts*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.