54.39.6.110📋 Copy

# IP Intelligence Briefing: 54.39.6.110/32

Classification: Low Risk - Cloud Infrastructure Node

Date: Intelligence compiled from current IPDebrief analysis

## Executive Summary

IP 54.39.6.110 was identified as a low-risk cloud infrastructure endpoint belonging to Ahrefs Pte Ltd, hosted on OVH infrastructure. The IP maintains a risk score of 25/100 with minimal threat indicators. No active malicious campaigns or known attacker associations were detected.

## Ownership and Network Profile

The IP address was registered to "Dmytro, Ahrefs Pte Ltd" under ASN 16276 (OVH). Network classification confirmed cloud hosting infrastructure with CIDR block 54.39.6.0/24. Geographic analysis placed the endpoint in Beauharnois, Quebec, Canada (CA).

DNS reverse resolution identified the hostname "proxy-ca001-san110.ahrefs.net" with domain ahrefs.net. No forward confirmation was available. Email authentication records (SPF, DMARC) were not configured for the associated domain.

## Risk Assessment

Current risk evaluation showed a score of 25/100, classified as "Low Risk." Threat indicators were absent, with zero known blacklist entries and no associations with known attack campaigns. The operator score registered at 0.2174, labeled "Minimal."

DNSBL analysis revealed one listing across eight total lists, suggesting historical or minor reputation issues. No Tor exit node, VPN, proxy, or residential traffic was detected.

## Neighborhood Context

The /24 subnet (54.39.6.0/24) showed mixed classification with an abuse density of 0.4375. Analysis of 256 total siblings identified 208 active addresses, with 112 classified as threat siblings and 53 as medium-risk. The target IP's neighborhood inherited risk score of 17.

Risk distribution across neighbors showed: 0 high-risk, 53 medium-risk, and 47 low-risk addresses.

## Service and Port Analysis

Network scanning detected no open ports, TLS certificates, HTTP titles, or service banners. The endpoint was classified as "Firewalled / No Services," indicating it operates as a passive infrastructure node rather than an active service endpoint.

## Historical Observations

Analysis of 24 signal observations from 2026 showed consistent network behavior patterns. Recent observations (June 2026) maintained stable risk profiles with no significant escalation. Signal types included threat, routing, services, ownership, reputation, and geolocation assessments.

## Related Entities

Relationship mapping identified 62 connections, primarily network-based relationships to OVH-CUST-281059680. No external hostname, organization, or certificate relationships beyond the parent network were identified.

## Recommended Actions

No specific security actions or firewall rules were generated due to the low-risk classification. The IP requires monitoring as part of normal cloud infrastructure management but does not warrant immediate blocking or investigation.

## Conclusion

IP 54.39.6.110 represents a legitimate cloud hosting endpoint for Ahrefs operations on OVH infrastructure. The absence of active threat indicators, combined with stable historical observations and low-risk classification, supports continued monitoring without immediate remediation action.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.