54.39.89.133📋 Copy

IP Intelligence Briefing: 54.39.89.133

Date: June 15, 2026

---

**1. IP Profile**

• Risk Score: Moderate (40/100)
• Provider: OVH (AS16276)
• Organization: Ahrefs Pte Ltd (registered to "Dmytro")
• Geolocation: Quebec, Canada (Beauharnois; coordinates inferred)
• Network Role: Cloud Compute (OVH-hosted, no open services)
• DNS: Associated with `proxy-ca012-san133.ahrefs.net` (Ahrefs infrastructure)

---

**2. Threat Observations**

• Abuse Density: Subnet (54.39.89.0/24) classified as high_abuse (52.21% abuse density).
• Neighbor Risk: 88/100 neighbors flagged as medium-risk; 12 low-risk.
• Historical Signals:

- Listed in 1 DNSBL (confidence 0.35).

- Subnet abuse density observed (June 5, 2026).

- Network operator score: Minimal (0.2174).

---

**3. Relationships & Context**

• Network: Part of OVH-CUST-281059691 (249 IPs total, 97 active).
• DNS: Directly linked to Ahrefs’ `proxy-ca012-san133.ahrefs.net`.
• Threat Correlation: No direct malicious campaigns or threats detected.

---

**4. Neighborhood Analysis**

• Subnet Risk: High abuse density (52.21%) with 130 threat siblings.
• Neighbor Distribution:

- Medium Risk: 88 IPs (35.3%).

- Low Risk: 12 IPs (4.8%).

• Inherited Risk: 20% risk score from subnet context.

---

**5. Recommendations**

• Monitor: Track DNS activity and network traffic for anomalies, given the subnet’s high abuse density.
• Investigate: Verify if Ahrefs’ infrastructure is compromised or misconfigured.
• Segment: Consider isolating this subnet if internal traffic to/from it is suspicious.
• Threat Hunting: Cross-reference with Ahrefs’ known infrastructure to confirm legitimacy.

---

Conclusion:

The IP is part of a high-abuse subnet associated with Ahrefs, a legitimate SEO tool provider. While the IP itself shows no direct malicious activity, its network context and neighbor risk suggest potential exposure to broader threats. SOC teams should prioritize monitoring and investigate anomalies in this subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.