142.44.220.29📋 Copy

# IP Intelligence Briefing: 142.44.220.29/32

## Executive Summary

Intellectual briefing generated for IP address 142.44.220.29/32 reveals a moderate-risk (40) endpoint hosted within OVH cloud infrastructure. The IP resolves to hostnames associated with ahrefs.net and exhibits geolocation validation anomalies. The surrounding /24 subnet demonstrates elevated abuse density (0.6797), indicating contextual risk. No active threat indicators were directly observed, but the environment warrants monitoring.

## Network Profile

• Organization: Dmytro, Ahrefs Pte Ltd (ASN 16276)
• Network: OVH-CUST-281059685
• Infrastructure Type: CloudCompute (OVH hosting provider)
• Classification: Cloud, Hosting
• Risk Score: 40 (Moderate Risk)

## Geolocation & Validation

• Reported Location: Singapore (QC, CA)
• Geolocation Validation: FAILED — RTT violation detected. Claimed distance of 5,597.9km inconsistent with measured RTT of 26ms (minimum possible 112ms for that distance). This suggests inaccurate geolocation data or proxy usage.
• Geo Sources: 1 source with consensus; plausible=false

## DNS & Services

• PTR Hostname: proxy-ca006-san29.ahrefs.net
• Forward Resolution: proxy-ca006-san29.ahrefs.net
• DNSBL Status: Listed on 1 of 8 blacklists
• Open Ports: None detected
• Service Banner: No services detected (firewalled/no services)
• TLS/HTTP: No certificates, HTTP titles, or server banners observed

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Abuse Confidence Score: Not available
• Threat Feeds: No matches
• Known Campaigns: None

## Neighborhood Analysis (142.44.220.0/24)

• Abuse Density: 0.6797 (High Abuse Classification)
• Threat Siblings: 174 out of 256 total IPs
• Active Siblings: 179
• Inherited Risk: 27
• Risk Distribution: 46 Medium, 54 Low, 0 High

## Observation History

• Total Observations: 17
• Recent Activity: Multiple signals observed on 2026-06-20
• Signal Types: Network classification, abuse density, operator routing assessment, comprehensive profile scoring
• Persistence: No persistent malicious behavior detected

## Related Entities

• Network Relationships: 43 relationships identified, predominantly same-network connections to OVH-CUST-281059685
• Campaign Correlations: None detected

## Recommended Security Actions

Firewall rules have been generated for multiple platforms:

## Threat Assessment

This IP presents moderate risk due to:

1. Hosting Environment: OVH cloud infrastructure with high-abuse-density neighborhood

2. Geolocation Inconsistencies: RTT/distance mismatch suggests potential proxy or misconfiguration

3. DNSBL Presence: Listed on one blacklist (of 8 checked)

However, no direct threat indicators were observed. The IP shows no open services and resolves to what appears to be a legitimate ahrefs.net infrastructure endpoint. The elevated neighborhood risk suggests contextual monitoring is warranted even if the specific IP is not directly malicious.

## Intelligence Conclusion

142.44.220.29/32 is a moderate-risk IP within a high-abuse-density cloud hosting subnet. While no direct threats were detected, the environment warrants monitoring. Recommended action is to block or monitor traffic from this IP, particularly given the neighborhood abuse density and geolocation validation failures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.