54.39.6.50
IP Intelligence Briefing: 54.39.6.50
*Generated via IPDebrief tools (Profile, History, Relationships, Neighbors)*
---
**1. IP Profile**
- Risk Score: 25 (Low Risk)
- Ownership:
- ASN: 16276 (OVH)
- Organization: Dmytro, Ahrefs Pte Ltd
- Network: 54.39.6.0/24 (OVH-CUST-281059680)
- Geolocation:
- Country: Canada (QC, Beauharnois)
- Coordinates: Latitude 45.3161, Longitude -73.8736
- Threat Indicators:
- No malicious indicators, spam, or known attacker activity.
- Network Role:
- Hosting provider (OVH), no CDN/VPN/Tor/Residential flags.
- Services:
- No open ports, TLS/HTTP services, or certificate data.
---
**2. Observation History**
- Temporal Trends:
- 17 observations over 30 days; no persistent malicious activity.
- Geolocation consistent (Canada).
- Ownership stability: 0 changes, no threat persistence.
- Key Signals:
- Low-risk operator score (0.2174, "Minimal").
- DNSSEC and CAA records valid.
- No DNSBL listings.
---
**3. Relationships**
- Network Associations:
- Linked to OVH-CUST-281059680 (same network).
- DNS:
- Resolves to `proxy-ca001-san50.ahrefs.net` (Ahrefs infrastructure).
- No email authentication records (SPF/DMArc).
- Other:
- No connections to known malicious domains or organizations.
---
**4. Neighborhood Analysis**
- Subnet: 54.39.6.0/24 (OVH)
- Abuse Density: 0.3713 (moderate risk in subnet).
- Neighbor Risk Distribution:
- Medium Risk: 70 IPs (40–50 risk score).
- Low Risk: 30 IPs.
- Notable Neighbors:
- IPs like 54.39.6.0, 54.39.6.1, and 54.39.6.2 show moderate risk (40–50).
---
**5. Recommendations**
- Monitoring:
- Track subnet (54.39.6.0/24) for unusual activity, given moderate abuse density.
- Monitor DNS resolution to `proxy-ca001-san50.ahrefs.net` for potential lateral movement.
- Firewall:
- No immediate blocking required for this IP, but consider rate-limiting or monitoring for anomalies.
- Context:
- The IP is part of Ahrefs' infrastructure, which is a legitimate hosting provider.
Conclusion: 54.39.6.50 is a low-risk IP associated with a legitimate hosting provider. While its subnet has moderate risk, no direct threats are detected. Continue monitoring for changes in behavior or network activity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Dmytro, Ahrefs Pte Ltd |
| ASN | AS16276 |
| Network Name | OVH-CUST-281059680 |
| CIDR Block | 54.39.6.0/24 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | proxy-ca001-san50.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-ca001-san50.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 29% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 31% | 1 | 3 |
| geolocation | 25% | 2 | 2 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-10 22:17:55 UTC |
| Last Seen | 2026-06-27 18:41:09 UTC |
| Profile Built | 2026-06-28 12:47:19 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 24 |
Full dossier details are available via our API.