142.44.220.33📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 142.44.220.33/32 | Classification: LOW RISK | Date: 2026-06-25

## EXECUTIVE SUMMARY

IP 142.44.220.33 is a low-risk (score: 25/100) host associated with OVH hosting infrastructure. The IP resolves to ahostname associated with Ahrefs, a legitimate SEO marketing tool provider. No active threat indicators, malware campaigns, or blacklist entries were identified. The IP is recommended for monitoring but does not require immediate blocking.

## INFRASTRUCTURE PROFILE

• Organization: Dmytro, Ahrefs Pte Ltd
• ASN: 16276 (OVH SAS)
• CIDR Block: 142.44.220.0/24
• Hosting Type: Cloud/Hosting Provider
• Service Status: Firewalled/No Services Detected (no open ports)

## GEOLOCATION INTELLIGENCE

• Primary Location: Singapore (CA region, QC)
• Geographic Validation: ⚠️ ANOMALY DETECTED

- GeoPlausible: FALSE

- RTT Violation: 29ms observed vs. 112ms minimum for 5,598km distance

- Distance Discrepancy: 5,597.9km vs. reported location

• Conclusion: Geolocation data is inconsistent; actual physical location cannot be determined with confidence.

## THREAT ASSESSMENT

## SUBNET ENVIRONMENT (142.44.220.0/24)

• Abuse Density: 0.3438 (moderate)
• Classification: Mixed
• Active Hosts: 226 of 256
• Threat IPs in Subnet: 88
• Risk Distribution: 0 High / 60 Medium / 40 Low

## NETWORK RELATIONSHIPS

• Primary Network: OVH-CUST-281059685
• Resolved Hostname: proxy-ca006-san33.ahrefs.net
• Associated Domain: ahrefs.net
• Forward Resolution: Confirmed (1 record)
• Email Auth: SPF/DMARC not configured

## OBSERVATION HISTORY

• Total Signals: 21 observations
• Most Recent: 2026-06-25
• Signal Types: Subnet abuse density, geolocation, operator score, network profile, DNS records
• Trend: No significant escalation in risk signals over observation period

## RECOMMENDED ACTIONS

1. MONITOR - Continue passive monitoring for traffic patterns

2. NO BLOCK - No immediate blocking required based on current risk profile

3. VERIFICATION - Consider blocking only if traffic patterns indicate compromise

4. NEIGHBOR AWARENESS - 88 threat IPs detected in same /24 subnet; monitor for lateral movement indicators

## SOC ANALYST NOTES

This IP is associated with legitimate marketing infrastructure (ahrefs.net). The low risk score and lack of threat indicators suggest normal hosting activity. However, the subnet contains 88 identified threat IPs, warranting awareness during incident investigation. Geographic data inconsistencies suggest reliance on inferred location data should be treated with caution.

Confidence Level: HIGH

Immediate Action Required: NO

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.