142.44.220.96

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## THREAT INTELLIGENCE BRIEFING: 142.44.220.96

Classification: LOW RISK INFRASTRUCTURE

Report Date: Current

Analyst: IPDebrief Intelligence Team

---

EXECUTIVE SUMMARY

IP 142.44.220.96/32 is a low-risk infrastructure address (risk score: 25) associated with legitimate SEO analytics provider Ahrefs, hosted on OVH cloud infrastructure in Canada. No active threat indicators detected.

---

NETWORK OWNERSHIP & INFRASTRUCTURE

Organization: Dmytro, Ahrefs Pte Ltd (AS16276)
Network Block: 142.44.220.0/24 (OVH-CUST-281059685)
Provider: OVH (Cloud Compute/Hosting infrastructure)
Geolocation: Canada (CA) – geolocation consensus with 3,000km accuracy radius
Infrastructure Type: CloudCompute, Hosting-enabled

---

THREAT ANALYSIS

Risk Score: 25 (Low Risk)
Abuse Confidence: None detected
Blacklist Status: Listed on 1 of 8 DNSBLs (control plane data)
Known Campaigns: None
Tor Exit/Proxy: Negative
Active Threat Indicators: None

---

NETWORK BEHAVIOR

DNS Resolution: proxy-ca006-san96.ahrefs.net (ahrefs.net domain)
Service Status: No open ports detected (firewalled/no services)
Routing Stability: False (route changes observed)
Ownership Persistence: Stable (0 ownership changes)

---

SUBNET NEIGHBORHOOD PROFILE

Subnet: 142.44.220.0/24
Sampled Neighbors: 100 IPs analyzed
Risk Distribution: 0 high-risk, 60 medium-risk, 40 low-risk
Abuse Density: Mixed classification with moderate activity
Threat Siblings: 91 threat-adjacent IPs in /24

---

OBSERVATION HISTORY

Total Observations: 21 signals
Recent Activity: Stable characteristics observed
Threat Persistence: 0 days (not persistently malicious)
Signal Confidence: 0.20–0.80 across observation types

---

SECURITY ACTIONS

Recommended Actions: None required
Firewall Rules: No specific rules recommended
Risk-Based Decision: No blocking necessary based on current profile

---

INTELLIGENCE ASSESSMENT

IP 142.44.220.96 represents legitimate enterprise infrastructure for Ahrefs' SEO analytics services. The address hosts no active web services and maintains low risk characteristics. The single DNSBL listing is inconclusive without additional context. No immediate defensive action required. Routine monitoring recommended for the /24 subnet due to mixed-risk neighbor profile.

Confidence Level: HIGH

Recommended Action: Monitor only

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇨🇦 Canada
Region	QC
City	Singapore
Timezone	—
Latitude	45.51
Longitude	-73.59

🏢 Ownership & Registration

Organization	Dmytro, Ahrefs Pte Ltd
ASN	AS16276
Network Name	OVH-CUST-281059685
CIDR Block	142.44.220.0/24
RIR	ARIN
Country	Singapore
Abuse Contact	—

🌐 DNS Intelligence

PTR	proxy-ca006-san96.ahrefs.net
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnames	`proxy-ca006-san96.ahrefs.net`

🔐 DNS Hygiene

Hygiene Score	40% (Fair)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Present

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Firewalled / No Services
Network Tier	Hosting — Infrastructure provider without advanced routing

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected
Closed Ports	22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	24%	2	4
routing	8%	1	1
services	17%	2	3
ownership	15%	2	2
reputation	28%	1	3
geolocation	23%	2	2
Overall	19%	10	15

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (50%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-05-11 08:57:40 UTC
Last Seen	2026-06-27 19:03:49 UTC
Profile Built	2026-06-28 13:09:21 UTC
Data Freshness	Live
Signal Types	20
Total Observations	26

🔍 20 signal types · 26 observations collected

This report is generated from 20+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

142.44.220.96📋 Copy