142.44.220.18📋 Copy

IP Intelligence Briefing: 142.44.220.18

Date: 2026-06-15

---

**1. Core Profile**

• Risk Score: 30 (Low Risk)
• Ownership:

- ASN: 16276 (OVH)

- Organization: "Dmytro, Ahrefs Pte Ltd"

- Network: 142.44.220.0/24

• Geolocation:

- Country: Canada (CA)

- City: Singapore (discrepancy noted; geolocation accuracy radius: 3,000 km)

• Network Role:

- Type: Cloud Compute (OVH infrastructure)

- Hosting: Yes

- Subnet Abuse Density: 62.89% (high abuse classification)

---

**2. Threat & Security Indicators**

• Threat Observations:

- No direct malicious indicators (no malware, spam, or known attacker associations).

- DNS:

- Resolves to `proxy-ca006-san18.ahrefs.net` (Ahrefs-related hostname).

- DNSSEC validated, CAA records present.

- BGP:

- Valid RPKI state, stable route (AS_PATH: 57866 16276).

- No recent route changes (30-day stability).

• Services:

- No open ports or TLS/HTTP services detected.

---

**3. Network Relationships**

• Subnet: 142.44.220.0/24
• Key Associations:

- OVH Network: 256 IPs in subnet; 156 active, 161 flagged as threats.

- DNS: Linked to Ahrefs' infrastructure (`ahrefs.net`).

- Routing: Part of high-abuse classification due to subnet activity.

---

**4. Neighborhood Analysis**

• Subnet Abuse Density: 62.89% (high abuse classification).
• Neighbor Risk:

- 100 IPs in subnet; 99% medium-low risk, 1% high risk.

- Notable Neighbors:

- IPs with risk scores of 40–50 (likely benign, but monitor for anomalies).

---

**5. Observational History**

• Recent Activity (30 Days):

- 29 observations; 15+ signals logged (e.g., DNS, geolocation, BGP).

- Moderate Risk Signals: 7/8 dimensions analyzed (e.g., routing, ownership).

- Geolocation Plausibility: Low confidence (city mismatch).

---

**6. Recommendations**

• Monitor Subnet: High abuse density in 142.44.220.0/24 warrants closer scrutiny.
• Verify DNS Associations: Confirm legitimacy of Ahrefs-related DNS entries.
• Check for Anomalies: No immediate action required, but correlate with other IPs in the subnet for potential lateral movement.
• Geolocation Discrepancy: Investigate why IP reports "Singapore" despite being registered in Canada.

Conclusion: 142.44.220.18 is a low-risk cloud-hosted IP, but its subnet shows elevated abuse activity. No direct threats detected, but ongoing monitoring is advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.