142.44.220.87📋 Copy

# IP INTELLIGENCE BRIEFING: 142.44.220.87/32

## Executive Summary

IP 142.44.220.87 presents as a moderate-risk (risk score 50/100) cloud-hosted address associated with OVH infrastructure. While no active threat indicators are currently present, the IP operates within a high-abuse subnet environment and exhibits geolocation inconsistencies warranting monitoring.

## Technical Profile

Ownership & Infrastructure:

• ASN: 16276 (OVH SAS)
• Organization: Dmytro, Ahrefs Pte Ltd
• CIDR Block: 142.44.220.0/24
• Infrastructure Type: Cloud compute hosting environment
• Service Status: Firewalled / No active services detected

Network Classification:

• Cloud Provider: OVH
• Hosting Classification: Yes
• Proxy/VPN/Tor: No
• Anycast: No

DNS Analysis:

• PTR Hostname: proxy-ca006-san87.ahrefs.net
• Domain: ahrefs.net
• Forward Resolution: Confirmed (1 hostname)
• Email Authentication: SPF/DMARC not configured

## Risk Assessment

Current Risk Score: 50 (Moderate Risk)

Threat Indicators:

• Blacklist Status: Not currently listed (0/0)
• DNSBL Listings: 2 of 8 total lists
• Known Campaigns: None identified
• Threat Feeds: No matches

Operator Score: 0.2174 (Minimal operator-level risk)

## Geographic Discrepancies

Reported Location: Singapore (country code CA)

Geolocation Validation: FAILED

• Distance Violation: 5,598km from probe origin
• Expected RTT: ≥112ms
• Observed RTT: 30ms
• This suggests potential geolocation spoofing or data inconsistency

## Neighborhood Context

Subnet Abuse Profile: 142.44.220.0/24

• Classification: High Abuse
• Abuse Density Score: 0.6992
• Active Siblings: 175 of 256 total IPs
• Threat Siblings: 179
• Inherited Risk Score: 27/100

The IP operates within a subnet with elevated abuse activity, though the specific address shows minimal individual risk.

## Historical Observations

Total Signals: 24 observations recorded

• June 17-18, 2026: Recent activity confirmed
• Risk Trend: Stable (no escalation detected)
• Threat Persistence: 0 days (not persistently malicious)
• Ownership Changes: 0 (stable ownership)

## Recommended Actions

Immediate Mitigation:

```bash

# iptables

iptables -A INPUT -s 142.44.220.87 -j DROP

# nftables

nft add rule inet filter input ip saddr 142.44.220.87 drop

# Cloudflare WAF

action: block

filter: ip.src eq 142.44.220.87

```

Priority: Medium (monitor for service activation or threat indicator emergence)

## Intelligence Notes

• The PTR hostname suggests association with Ahrefs infrastructure, though the organization listing shows "Dmytro, Ahrefs Pte Ltd"
• No open ports or active services detected (firewalled configuration)
• Consider blocking at perimeter firewall given the high-abuse subnet context
• Monitor for changes in geolocation consistency or emergence of threat indicators

---

*Report generated: IPDebrief Intelligence Platform*

*Data sources: Multi-signal aggregation from 6+ dimensions*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.