54.39.136.52📋 Copy

# IP INTELLIGENCE BRIEFING: 54.39.136.52/32

Date: 2026-06-26

Classification: Low Risk

Risk Score: 25

## EXECUTIVE SUMMARY

IP address 54.39.136.52 is a cloud compute resource hosted within OVH infrastructure, associated with Ahrefs Pte Ltd. The IP exhibits a low risk profile (score: 25) with no active threat indicators. The subnet demonstrates moderate abuse density, suggesting the IP should be evaluated in context of neighboring addresses.

## NETWORK OWNERSHIP & CLASSIFICATION

• ASN: 16276 (OVH)
• Organization: Dmytro, Ahrefs Pte Ltd
• Network Block: 54.39.136.0/24
• Infrastructure Type: Cloud Compute / Hosting
• Geolocation: Quebec, Canada (Beauharnois)
• Network Role: Firewalled / No Services Detected
• Provider: OVH (Cloud hosting environment)

## THREAT INDICATORS

• Threat Score: 25/100 (Low Risk)
• Abuse Confidence: None
• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## NETWORK BEHAVIOR & SERVICES

• Open Ports: None detected
• DNS Resolution: proxy-ca002-san52.ahrefs.net
• HTTP Services: None (firewalled/no services)
• TLS Certificates: None
• Service Classification: Infrastructure (no public web services)

## SUBNET CONTEXT (54.39.136.0/24)

• Abuse Density: 0.4609 (Moderate)
• Total Siblings: 256
• Active Siblings: 189
• Threat Siblings: 118
• Risk Distribution: High (0), Medium (55), Low (45)
• Inherited Risk: 18

## OBSERVATION HISTORY

• Total Observations: 21 signals
• Recent Activity: June 26, 2026
• Domain Associations: ahrefs.net
• Geolocation Signals: Multiple geolocation providers confirm Canada
• Signal Stability: Consistent ownership and classification
• Threat Persistence: None observed (0 threat persistence days)

## RELATIONSHIP GRAPH

• Total Relationships: 60
• Primary Associations: OVH-CUST-281059681 network (55+ same-network relationships)
• Related Entities: Cloud infrastructure peers

## SECURITY RECOMMENDATIONS

Current Risk Assessment: Low risk - no immediate blocking required.

Recommended Actions:

• Monitor subnet-level activity due to moderate abuse density (0.4609)
• Evaluate traffic patterns against neighboring IPs (118 threat siblings in /24)
• Standard logging recommended for cloud infrastructure
• No specific firewall rules recommended at this time

Monitoring Priority: Medium - Evaluate in context of subnet activity and business relationship with Ahrefs infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.