54.39.136.82

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP INTELLIGENCE BRIEFING: 54.39.136.82/32

Classification: MODERATE RISK INFRASTRUCTURE

Date: Current analysis period

Source: IPDebrief Intelligence Platform

Executive Summary

IP 54.39.136.82 resolved as cloud infrastructure hosted by OVH Canada (ASN 16276) operating under Ahrefs Pte Ltd. The system carries a moderate risk score of 40/100 with no active threat indicators. Infrastructure operates as cloud hosting without open services. Subnet neighborhood shows elevated abuse density requiring contextual monitoring.

Ownership & Infrastructure

Organization: Dmytro, Ahrefs Pte Ltd
ASN: 16276 (OVH)
Network: OVH-CUST-281059681
CIDR Block: 54.39.136.0/24
Location: Beaucharnois, Quebec, Canada (CA)
Infrastructure Type: CloudCompute/Hosting
Status: Cloud infrastructure (confirmed)

Network Role & Services

Connection Type: Cloud-hosted
Hosting: Yes
CDN/Proxy/VPN/Tor: No
Open Ports: None detected
DNS PTR: proxy-ca002-san82.ahrefs.net
Domain Association: ahrefs.net
Forward Resolution: 1 hostname confirmed

Threat Posture

Risk Score: 40 (Moderate Risk)
Abuse Confidence Score: Not applicable
Tor Exit: No
Known Attacker: No
Spam Source: No
Blacklist Count: 0 (DNSBL: 1 of 8 lists)
Active Threat Indicators: None
Known Campaigns: None

Geolocation Validation

Country: Canada (CA)
Region: Quebec (QC)
City: Beaucharnois
RTT Validation: Violation detected (25ms < 112.6ms minimum expected for 5,629km distance)
Geo Plausibility: False

Historical Observation (28 signals)

Recent observations maintained consistent cloud/hosting classification. Provider confirmed as OVH across multiple timestamps. No ownership changes recorded. Threat persistence days: 0. IP not classified as persistently malicious.

Subnet Neighborhood Analysis (54.39.136.0/24)

Total Siblings: 256
Active Siblings: 184
Threat Siblings: 180
Abuse Density Classification: High Abuse (0.7031)
Inherited Risk Score: 28
Risk Distribution: 0 high, 18 medium, 82 low

Relationship Graph

51 relationships identified, all linked to same network entity (OVH-CUST-281059681). No external entity correlations detected.

Recommended Actions

No immediate blocking or firewall actions recommended. IP classified as legitimate cloud infrastructure for Ahrefs operations. Monitor subnet abuse density for lateral threat activity. DNSBL presence warrants periodic review.

Analyst Notes

IP operates as legitimate cloud hosting for Ahrefs, a known SEO analytics platform. Risk profile consistent with commercial cloud infrastructure. Subnet-level abuse density requires awareness but does not indicate direct compromise. Continue baseline monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇨🇦 Canada
Region	QC
City	Beauharnois
Timezone	—
Latitude	45.32
Longitude	-73.87

🏢 Ownership & Registration

Organization	Dmytro, Ahrefs Pte Ltd
ASN	AS16276
Network Name	OVH-CUST-281059681
CIDR Block	54.39.136.0/24
RIR	ARIN
Country	Singapore
Abuse Contact	—

🌐 DNS Intelligence

PTR	proxy-ca002-san82.ahrefs.net
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnames	`proxy-ca002-san82.ahrefs.net`

🔐 DNS Hygiene

Hygiene Score	40% (Fair)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Present

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Firewalled / No Services
Network Tier	Hosting — Infrastructure provider without advanced routing

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected
Closed Ports	22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	34%	2	3
routing	20%	2	3
services	15%	2	2
ownership	26%	3	3
reputation	23%	1	2
geolocation	34%	2	3
Overall	25%	12	16

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Mostly Consistent (80%) — 1 contradiction(s)
Attribution	Low (35%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

⚠ Claimed geolocation contradicts RTT physics measurement

📅 Observation Timeline 🔄 Live

First Seen	2026-05-23 18:30:53 UTC
Last Seen	2026-06-28 23:01:16 UTC
Profile Built	2026-06-29 05:02:58 UTC
Data Freshness	Live
Signal Types	25
Total Observations	27

🔍 25 signal types · 27 observations collected

This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

54.39.136.82📋 Copy