142.44.220.79📋 Copy

## IP Intelligence Briefing: 142.44.220.79/32

Date: Analysis completed based on IPDebrief intelligence platform data

Classification: Moderate Risk

Executive Summary

IP 142.44.220.79 is a cloud hosting infrastructure endpoint operated by OVH under customer account OVH-CUST-281059685 for Ahrefs Pte Ltd. The IP exhibits moderate risk (Score: 40) within a high-abuse density subnet (0.6719 abuse density). No active threat indicators detected, but geolocation inconsistencies and neighborhood context warrant monitoring.

---

Network Infrastructure

• Organization: Dmytro, Ahrefs Pte Ltd (ASN 16276)
• Provider: OVH CloudCompute infrastructure
• Network Block: 142.44.220.0/24
• Infrastructure Type: Cloud hosting with firewall protection
• Status: No open services detected (Firewalled/No Services)

Geolocation Analysis

• Reported Country: Canada (CA)
• Reported Region: Quebec
• Geolocation Validation: FAILED

- RTT measurement: 24ms for 5,598km distance

- Minimum possible RTT: 112ms for stated distance

- Conclusion: Reported geolocation is inconsistent and unreliable

Threat Assessment

• Risk Score: 40/100 (Moderate Risk)
• Threat Indicators: None identified
• Blacklist Status: 0 blacklists
• DNSBL Status: Listed on 1 of 8 total DNSBLs
• Campaign Associations: None detected
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False

---

Neighborhood Analysis (142.44.220.0/24)

• Subnet Classification: High Abuse
• Abuse Density: 0.6719 (67.19%)
• Total Subnet IPs: 256
• Active Siblings: 173
• Threat Siblings: 172
• Inherited Risk Score: 26
• Risk Distribution: 99 medium, 1 low, 0 high risk neighbors

Relationship Graph

• Total Relationships: 45 detected
• Primary Associations: Multiple Same Network relationships to OVH-CUST-281059685
• DNS Associations: proxy-ca006-san79.ahrefs.net (ahrefs.net domain)

---

Observation History

• Total Observations: 19 signals recorded
• Latest Classification: High Abuse (2026-06-14T18:45:02)
• Provider Score: 0 (OVH infrastructure)
• Authority Score: 0
• Stability: No ownership changes observed
• Threat Persistence: 0 days

---

Recommended Actions

Immediate:

• Monitor incoming traffic from subnet 142.44.220.0/24 given high abuse density
• Implement rate limiting for connections from this subnet
• Validate any traffic claims against geolocation inconsistencies

Firewall Rules:

• Consider blocking or rate-limiting traffic from 142.44.220.0/24 if business requires
• Monitor for lateral movement patterns within OVH cloud infrastructure

Investigation Notes:

• The geolocation discrepancy (Canada country code with Singapore coordinates) may indicate spoofed headers or misconfigured infrastructure
• High neighbor threat ratio (172/256 = 67%) suggests this subnet contains significant malicious actors
• Ahrefs.net association is legitimate; verify if this specific IP is authorized for use by the organization

---

Risk Rating: MODERATE

Action Priority: MEDIUM – Monitor and validate traffic patterns

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.