54.39.136.117📋 Copy

## IP Intelligence Briefing: 54.39.136.117

Classification: Cloud Hosting Infrastructure | Risk Level: Moderate (40/100) | Status: Monitored

---

**1. Ownership & Network Context**

• ASN: 16276 (OVH SAS)
• Organization: Dmytro, Ahrefs Pte Ltd
• Netname: OVH-CUST-281059681
• CIDR Block: 54.39.136.0/24
• Geolocation: Canada (QC), Beauharnois (latitude/longitude: null)
• Infrastructure Type: Cloud Computing (OVH hosting provider)
• DNS Resolution: proxy-ca002-san117.ahrefs.net (ahrefs.net domain)

**2. Threat Indicators Assessment**

• Abuse Confidence: Null (no active threats detected)
• Blacklist Status: 0 explicit lists; 1 DNSBL listing (of 8 total)
• Threat Classifications: Not Tor, not known attacker, not spam source
• Campaign Association: None detected
• Known Campaigns: 0

**3. Neighborhood Analysis (54.39.136.0/24)**

• Subnet Classification: High Abuse (0.6992 abuse density)
• Inherited Risk Score: 27/100
• Subnet Statistics:

- Total IPs: 256

- Active Siblings: 184

- Threat Siblings: 179

• Risk Distribution: High (0), Medium (45), Low (55)
• Risk Implication: Subnet exhibits elevated abuse patterns despite individual IP's moderate risk score

**4. Service & Behavioral Profile**

• Open Ports: None detected (firewalled/no services exposed)
• TLS/HTTP Services: No active web services
• DNSSEC: Valid
• CAA Records: Present
• Route Stability: Unstable (isRouteStable: false)

**5. Historical Signals (19 Observations)**

Recent activity shows consistent patterns:

• Persistent OVH cloud infrastructure classification
• High abuse subnet classification maintained across observations
• Canadian geolocation confirmed via multiple sources
• ahrefs.net domain association stable
• Minimal operator score (0.2174)

**6. Related Entities**

• 53 Network Relationships identified
• Primary association: OVH-CUST-281059681 network

**7. Recommended Actions**

• Monitoring Priority: Medium (due to subnet abuse density)
• Firewall Rule: No explicit blocks required at this time
• Investigation Trigger: Monitor for changes in threat indicators
• Context: Legitimate cloud hosting infrastructure associated with ahrefs.net; no active malicious activity detected

---

Briefing Generated: Based on comprehensive IPDebrief intelligence gathering

Analyst Notes: IP exhibits characteristics of legitimate cloud hosting infrastructure with elevated neighborhood risk context. No direct threat indicators present. Monitor for behavioral changes given high-abuse subnet environment.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.