54.39.89.64📋 Copy

IP Intelligence Briefing: 54.39.89.64

Date: 2026-06-14

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership:

- ASN: 16276 (OVH)

- Organization: Dmytro, Ahrefs Pte Ltd

- Subnet: 54.39.89.0/24 (OVH-CUST-281059691)

• Geolocation:

- Country: Canada (QC, Beauharnois)

- Coordinates: Latitude 56.13, Longitude -106.35 (3000km accuracy)

• Network Role:

- Type: Cloud Compute (OVH-hosted)

- Services: No open ports; DNS resolves to `proxy-ca012-san64.ahrefs.net`

- Threat Indicators: No malware, spam, or known attacker activity

---

**2. Observation History**

• Latest Activity: June 14, 2026 (geolocation and DNS records).
• Subnet Trends:

- Abuse Density: 52.99% (high_abuse classification)

- Inherited Risk: 21 (from subnet)

- Threat Siblings: 133 IPs in the 54.39.89.0/24 subnet flagged as risky.

• Stability:

- Route Stability: 0 changes in 30 days; unstable BGP routes.

- DNSSEC Valid: Yes; CAA records present.

---

**3. Relationships**

• Linked Entities:

- Network: OVH-CUST-281059691 (same subnet)

- Domains: `ahrefs.net` (DNS resolver with SPF/DKIM disabled).

- Certificates: No TLS certs or HTTP services detected.

---

**4. Neighborhood Analysis**

• Subnet: 54.39.89.0/24 (251 IPs total, 97 active).
• Risk Distribution:

- High Risk: 0 IPs

- Medium Risk: 90 IPs (54.39.89.x)

- Low Risk: 10 IPs

• Abuse Density: 0% (no direct abuse, but inherited risk from subnet).

---

**5. Recommendations**

• Monitoring: Track subnet activity for unusual traffic patterns (e.g., DDoS, lateral movement).
• Mitigation:

- Consider blocking the entire 54.39.89.0/24 subnet if risk escalates.

- Validate DNSSEC and CAA records for `ahrefs.net` to prevent spoofing.

• Context: While the IP itself is clean, its subnet’s high abuse density warrants closer scrutiny.

---

Note: No direct malicious activity detected, but network context suggests elevated risk.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.