54.39.136.193📋 Copy

# IP Intelligence Briefing: 54.39.136.193

## Executive Summary

IP 54.39.136.193 is a cloud infrastructure address associated with OVH hosting under Ahrefs Pte Ltd. The IP carries a moderate risk score of 50/100 and exhibits no direct malicious indicators but resides in a high-abuse density subnet (67.97%). No open services or active ports were detected during analysis.

## IP Ownership and Network Classification

• ASN: 16276
• Organization: Dmytro, Ahrefs Pte Ltd
• Netname: OVH-CUST-281059681
• RIR: ARIN
• CIDR Block: 54.39.136.0/24
• Infrastructure Type: Cloud Compute
• Classification: Cloud hosting with firewall configuration

## Geolocation Analysis

• Country: Canada (CA)
• Region: Quebec
• Coordinates: 56.13°N, -106.35°W (uncertainty radius: 3000 km)
• GeoValidation: Inconsistent geolocation data detected; geoPlausible flag false
• Minimum RTT: 30.7ms
• Hop Count: 18 hops through transit networks including Comcast

## DNS and Service Information

• PTR Record: proxy-ca002-san193.ahrefs.net
• Domain: ahrefs.net
• Forward Resolution: Confirmed (1 hostname)
• Email Authentication: SPF and DMARC records absent
• Open Ports: None detected
• HTTP/TLS Services: No active services exposed
• Server Fingerprint: Unavailable (firewalled/no services)

## Threat Indicators

• Risk Score: 50/100 (Moderate Risk)
• Abuse Confidence Score: Not calculated
• Blacklist Status: 0 blacklists
• Known Campaigns: None detected
• Campaign Likelihood: Not applicable
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• DNSBL Listings: 2 of 8 total lists
• Operator Score: 0.2174 (Minimal)

## Network Neighborhood Assessment

• Subnet: 54.39.136.0/24
• Abuse Density: 67.97% (high_abuse classification)
• Total Siblings: 256 IPs
• Active Siblings: 182
• Threat Siblings: 174
• Inherited Risk Score: 27
• Neighbor Risk Distribution: 100 medium-risk, 0 high-risk, 0 low-risk

## Relationship Graph

• Network Associations: Multiple entries linking to OVH-CUST-281059681
• DNS Associations: proxy-ca002-san193.ahrefs.net (multiple entries)
• Related Entities: 9 total relationship entries

## Historical Observations

• Total Observations: 17 signals recorded
• Recent Data (2026-06-16):

- Subnet classification stable as high_abuse

- Geolocation signals show CA with uncertainty

- Ownership stability: 0 changes recorded

- Threat persistence days: 0

- Is persistently malicious: false

- Route stability: false

## Control Plane Analysis

• BGP Prefix: 54.39.0.0/16
• Origin ASN: 16276
• Route Changes (30-day): 0
• RPKI State: Not available
• IRR Consistency: Not available
• DNSSEC Valid: true
• CAA Records: Present
• Route Stability: false

## Recommended Security Actions

No specific firewall rules or blocking actions are currently recommended based on the IP's risk profile. The address exhibits moderate risk characteristics but lacks direct malicious indicators.

---

*Report generated from IPDebrief intelligence data. Review periodically for status changes.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.