54.39.89.77📋 Copy

IP Intelligence Briefing: 54.39.89.77/32

Date: June 15, 2026

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Provider: OVH (ASN 16276)
• Organization: Ahrefs Pte Ltd (OVH-CUST-281059691)
• Geolocation: Registered to Canada (QC, Beauharnois), but geo-plausibility is false due to RTT discrepancy (27ms vs. expected 112.6ms for 5,629km).
• Network Role: Cloud compute infrastructure (OVH-hosted, no public services detected).

---

**2. Threat Indicators**

• No malicious indicators detected (no blacklists, spam, or known attacker associations).
• Threat Feeds: Clean; no campaign associations or certificate mismatches.

---

**3. Observation History**

• Recent Activity (June 10–15):

- Geo validation anomalies: RTT inconsistent with claimed location.

- Subnet abuse density: 0.56 (moderate risk).

- No persistent malicious behavior observed.

---

**4. Relationships**

• DNS Associations: Linked to `proxy-ca012-san77.ahrefs.net` (Ahrefs subdomain).
• Network: Part of OVH subnet `54.39.89.0/24` (256 IPs).
• Subnet Risk: 143/256 IPs flagged as threats; 101 active IPs.

---

**5. Neighborhood Analysis**

• Subnet Abuse Density: 56% (high_abuse classification).
• Neighbor Risks:

- 99 IPs: Low risk (score 40).

- 1 IP: High risk (score 40).

• Inherited Risk: 22 (moderate).

---

**6. Recommendations**

• Monitor Geolocation Discrepancy: Investigate potential spoofing or misconfigured routing.
• Subnet Vigilance: Watch neighboring IPs for suspicious activity, given the subnet’s high abuse density.
• DNS Monitoring: Track `proxy-ca012-san77.ahrefs.net` for anomalous behavior.
• No Immediate Action Required: No direct threat to network, but context from the subnet warrants closer scrutiny.

---

Source: IPDebrief Threat Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.