142.44.220.60📋 Copy

# IP Intelligence Briefing: 142.44.220.60

## Executive Summary

IP address 142.44.220.60 is a low-risk (Score: 25) cloud compute endpoint hosted in Canada under OVH infrastructure. The IP resolves to ahosting.net domain with PTR record proxy-ca006-san60.ahrefs.net, indicating association with Ahrefs Pte Ltd organization. No active open ports detected, and no open services identified.

## Ownership & Infrastructure

• ASN: 16276 (OVH)
• Organization: Dmytro, Ahrefs Pte Ltd
• Network: OVH-CUST-281059685
• Infrastructure Type: Cloud Compute / Hosting
• Geolocation: Beauharnois, QC, Canada (CA)
• RTT Validation: Geolocation implausible (5,597 km distance vs. 27ms RTT indicates potential data center misattribution)

## Threat Profile

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not flagged as attacker, spam source, or Tor exit node
• Blacklist Status: 0 blacklist hits
• DNSBL Status: Listed on 1 of 8 DNSBL feeds
• Threat Indicators: None observed in current profile

## Network Environment Assessment

The /24 subnet (142.44.220.0/24) shows elevated neighborhood activity:

• Abuse Density: 0.3555 (35.55%)
• Threat Siblings: 91 of 226 active IPs flagged as threats
• Risk Distribution: High (0), Medium (60), Low (40)
• Inherited Risk: 14

This indicates the subnet hosts mixed legitimate and potentially compromised endpoints, warranting contextual monitoring.

## Service & DNS Analysis

• Open Ports: None detected
• HTTP/HTTPS: No active web services
• PTR Record: proxy-ca006-san60.ahrefs.net
• Forward Resolution: proxy-ca006-san60.ahrefs.net
• Domain: ahrefs.net
• Email Authentication: No SPF/DMARC records found

## Historical Observations (26 signals)

Recent observations (June 2026) show:

• Subnet abuse density consistently elevated at 0.3555
• Operator score: 0.3043 (Basic classification)
• No persistent malicious behavior observed
• No campaign correlations detected

## Security Recommendations

• Monitoring: No immediate blocking required; maintain logging for forensic capability
• Firewall Rules: No specific action recommended based on current risk profile
• Contextual Awareness: Monitor for traffic patterns from other 91 threat siblings in the same /24
• Verification: Confirm service purpose given "Firewalled / No Services" status

## Conclusion

This IP represents a legitimate cloud hosting endpoint with moderate neighborhood risk exposure. No immediate threat indicators present, but the subnet's 35% abuse density suggests maintaining baseline traffic monitoring is appropriate for threat detection.

---

*Report generated: 2026-06-26*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.