54.39.210.165📋 Copy

IP Intelligence Briefing: 54.39.210.165

Date: 2026-06-10

---

**1. Core Profile**

• Risk Score: Moderate (50/100)
• Provider: OVH (ASN 16276)
• Organization: Dmytro, Ahrefs Pte Ltd
• Geolocation: Canada (QC, Beauharnois)
• Network Role: CloudCompute (OVH infrastructure)
• Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).

---

**2. Observation History**

• Recent Activity:

- Geolocation inferred as Canada (56.13°N, -106.35°W) with 3000km accuracy.

- Subnet abuse density: 49.6% (mixed classification).

- DNS resolution tied to `ahrefs.net` (likely legitimate).

• Temporal Trends:

- No persistent malicious behavior; threat observation count: 1.

---

**3. Relationships & Dependencies**

• Network Associations:

- Linked to OVH subnet `54.39.210.0/24` (252 IPs, 130 active).

- 125 neighbors flagged as high-risk (abuse density: 49.6%).

• DNS Connections:

- Resolves to `proxy-ca007-san165.ahrefs.net` (Ahrefs service).

- No email authentication (SPF/DKIM) detected.

---

**4. Subnet Analysis**

• Neighboring IPs:

- 100 total IPs in subnet; 78 medium-risk, 21 low-risk.

- High-risk neighbors: 78 (abuse density: 49.6%).

• Recommendation:

- Monitor subnet for lateral movement or malicious activity.

- Consider blocking high-risk neighbors if traffic is suspicious.

---

**5. Actionable Insights**

• SOC Analyst Guidance:

- Monitor: Subnet `54.39.210.0/24` for unusual traffic patterns.

- Verify: Ensure DNS resolution to `ahrefs.net` is legitimate (e.g., check SSL/TLS certificates).

- Mitigate: Block high-risk neighbors in the subnet if unauthorized access is suspected.

- Context: IP appears benign but resides in a moderately risky subnet.

---

Note: No direct malicious activity detected, but subnet-level risks warrant further investigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.