54.39.203.84
IP Intelligence Briefing: 54.39.203.84
Date: June 6, 2026
---
**1. Core Profile**
- Risk Score: 25 (Low Risk)
- Ownership:
- ISP: OVH (ASN 16276)
- Organization: Dmytro, Ahrefs Pte Ltd
- Network: OVH-CUST-281059687
- Geolocation:
- Country: Canada (QC, Beauharnois)
- Geo Validation: Plausibility flag failed (RTT of 28ms inconsistent with 5,629km distance).
- Threat Indicators:
- No malicious activity detected (no indicators, blacklists, or campaigns).
- DNS: Linked to `ahrefs.net` with SPF/DMArc misconfigurations.
- Network Role:
- CloudCompute (OVH-hosted, no residential/mobile traffic).
- Services: No open ports; TLS/HTTP banners not detected.
---
**2. Observation History**
- Latest Activity: June 6, 2026
- Geo Validation: RTT anomaly (28ms vs. expected 112.6ms for distance).
- Network Behavior: No persistent threats or ownership changes.
- Threat Feeds: No correlated malicious campaigns.
---
**3. Relationships**
- Network Links:
- Subnet: `54.39.203.0/24` (OVH-CUST-281059687).
- Connected Entities:
- DNS: `proxy-ca008-san84.ahrefs.net` (ptr hostname).
- Certificates: No TLS certs detected.
- Routing: BGP prefix `54.39.0.0/16` (AS16276).
---
**4. Neighborhood Analysis**
- Subnet: `54.39.203.84/24`
- Abuse Density: 0.45 (mixed risk).
- Neighbor Risk:
- High Risk: 0 IPs
- Medium Risk: 94 IPs
- Low Risk: 6 IPs
- Notable Neighbors:
- `54.39.203.0` (risk 40), `54.39.203.1` (risk 40), etc.
---
**5. Recommendations**
- Monitor Subnet: The subnet has a medium abuse density; investigate neighbors for potential lateral movement.
- Verify Geolocation: The IP’s RTT discrepancy suggests possible spoofing or misconfigured DNS.
- DNS Hardening: Address SPF/DMArc misconfigurations for `ahrefs.net` to prevent spoofing.
- Cloud Security: Ensure OVH-hosted resources are secured against unauthorized access (e.g., IAM policies).
---
Conclusion: 54.39.203.84 is a low-risk cloud-hosted IP with no direct malicious indicators. However, its subnet’s abuse density and geo validation anomalies warrant further investigation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Dmytro, Ahrefs Pte Ltd |
| ASN | AS16276 |
| Network Name | OVH-CUST-281059687 |
| CIDR Block | 54.39.203.0/24 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | proxy-ca008-san84.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-ca008-san84.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 23% | 2 | 2 |
| reputation | 34% | 1 | 3 |
| geolocation | 31% | 2 | 3 |
| Overall | 24% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-11 15:05:32 UTC |
| Last Seen | 2026-06-27 19:46:10 UTC |
| Profile Built | 2026-06-28 13:51:02 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 26 |
Full dossier details are available via our API.