54.39.89.135
IP Intelligence Briefing: 54.39.89.135
Date: 2026-06-14
---
**1. Core Profile**
- Risk Score: 25 (Low Risk)
- Ownership: Registered to Dmytro, Ahrefs Pte Ltd (OVH, ASN 16276).
- Geolocation:
- Country: Canada (QC, Beauharnois).
- Geo Validity: Flagged as *not plausible* due to RTT anomalies (observed 27ms vs. expected 112.6ms for 5,629km).
- Network Role: Cloud compute infrastructure (OVH-hosted, no residential/mobile attributes).
- Threat Indicators: No malicious activity detected (zero abuse confidence, no blacklists, no campaigns).
---
**2. Observation History (Last 30 Days)**
- First Seen: 2026-06-03
- Last Seen: 2026-06-14
- Key Trends:
- Stable ownership (no changes).
- No persistent threat signals (zero threat persistence days).
- Geo validation inconsistencies (RTT vs. distance mismatch).
---
**3. Network Relationships**
- Primary Network: Subnet 54.39.89.0/24 (OVH-CUST-281059691).
- Neighbors:
- 100 IPs in the subnet (86 medium-risk, 14 low-risk).
- Abuse Density: 0% (no malicious activity in subnet).
- Relationships:
- Linked to OVH (cloud provider) and Ahrefs (SEO tooling company).
---
**4. DNS & Services**
- PTR Hostname: `proxy-ca012-san135.ahrefs.net` (Ahrefs domain).
- Services: No open ports or TLS certificates detected.
- Email Reputation: No SPF/DKIM records or email-related threats.
---
**5. Threat & Risk Analysis**
- Threat Likelihood: *None* (no malicious campaigns, no known attackers).
- Abuse Confidence: 0 (no malicious indicators).
- Neighbor Risk: Subnet has 114 malicious IPs, but this IP is not flagged.
---
**6. Recommendations**
- Monitoring: Track for unexpected geo validation changes or new threat indicators.
- Firewall: No immediate rules required; IP is low-risk.
- Context: Part of OVH's cloud infrastructure, likely legitimate.
---
Conclusion: 54.39.89.135 is a low-risk, cloud-hosted IP associated with Ahrefs. No malicious activity detected. Monitor for anomalies but no immediate action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Dmytro, Ahrefs Pte Ltd |
| ASN | AS16276 |
| Network Name | OVH-CUST-281059691 |
| CIDR Block | 54.39.89.0/24 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | proxy-ca012-san135.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-ca012-san135.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 29% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 15% | 2 | 2 |
| reputation | 28% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:04:29 UTC |
| Last Seen | 2026-06-27 08:51:05 UTC |
| Profile Built | 2026-06-28 02:56:42 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 27 |
Full dossier details are available via our API.