142.44.225.246📋 Copy

IP Intelligence Briefing: 142.44.225.246

Date: 2026-06-15

---

**1. Core Profile**

• Risk Score: Moderate (50/100)
• Ownership:

- ISP: OVH (ASN 16276)

- Organization: Dmytro, Ahrefs Pte Ltd

- Network: OVH-CUST-281059696

• Geolocation:

- Country: Canada (CA)

- City: Singapore (discrepancy noted; geolocation validation flags as implausible)

- Coordinates: Claimed (45.5075, -73.5887) vs. actual distance of 5,598 km from reported location.

• Network Role:

- Type: CloudCompute (OVH-hosted)

- Services: No open ports; TLS/HTTP banners not detected.

---

**2. Threat Indicators**

• No direct malicious activity detected (no malware, phishing, or exploit indicators).
• DNS:

- PTR record points to `proxy-ca017-san246.ahrefs.net` (ahrefs.net).

- CAA records present but no DNSBL listings.

• Control Plane:

- DNSSEC validated, but 2 DNSBL listings (high-risk).

- BGP prefix `142.44.128.0/17` with stable route history.

---

**3. Observation History**

• Recent Activity (Last 30 Days):

- DNS Resolution: Consistent with `ahrefs.net` (no anomalies).

- Geolocation Validation:

- RTT (28ms) inconsistent with 5,598 km distance.

- Flagged as "geo-plausible: false."

- Network Stability: Subnet abuse density at 56.25% (high risk).

---

**4. Network Relationships**

• Linked Entities:

- Subnet: 142.44.225.0/24 (OVH-owned).

- Organization: Ahrefs Pte Ltd (cloud infrastructure provider).

- Domains: `ahrefs.net` (hosted DNS records).

---

**5. Neighborhood Analysis**

• Subnet: 142.44.225.0/24 (256 IPs).
• Risk Distribution:

- High Risk: 0 IPs

- Medium Risk: 97 IPs (abuse density: 56.25%)

- Low Risk: 3 IPs

• Threat Siblings: 144 IPs in subnet flagged for abuse.

---

**6. Recommendations**

• Verify Geolocation: Investigate discrepancy between reported location (Singapore) and actual distance from Canada.
• Monitor Subnet: High abuse density in 142.44.225.0/24; prioritize monitoring neighboring IPs for suspicious activity.
• DNSBL Check: Confirm legitimacy of DNSBL listings (2 entries) for `142.44.225.246`.
• Network Segmentation: Ensure cloud compute resources are isolated from critical systems.

Conclusion: The IP is associated with Ahrefs, a legitimate company, but its geolocation anomalies and subnet abuse density warrant further investigation. No immediate threat detected, but proactive monitoring is advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.