142.44.228.130
IP Intelligence Dossier
Your IP: 216.73.216.123
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
INTELLIGENCE BRIEFING: 142.44.228.130/32
EXECUTIVE SUMMARY
IP address 142.44.228.130 is a moderate-risk (risk score: 50) cloud hosting endpoint associated with OVH infrastructure (ASN: 16276). The IP resolves to a reverse DNS hostname proxy-ca016-san130.ahrefs.net and operates within a high-abuse subnet (142.44.228.0/24) with 71.88% abuse density. No active services are currently detected on this endpoint.
OWNERSHIP & INFRASTRUCTURE
- Organization: Dmytro, Ahrefs Pte Ltd
- Provider: OVH Cloud (OVH-CUST-281059695)
- Network Block: 142.44.228.0/24
- Infrastructure Type: CloudCompute / Hosting
- Control Plane: BGP prefix 142.44.128.0/17, origin ASN 16276
GEOLOCATION ANALYSIS
- Reported Location: Canada (QC region), Singapore city
- Validation Status: FAILED
- Issue: Distance calculation of 5,598km contradicts RTT measurement of 26ms (minimum expected: 112ms). Geolocation data is unreliable and should not be used for targeting decisions.
THREAT POSTURE
- Risk Classification: Moderate Risk (50/100)
- DNSBL Status: Listed on 2 of 8 threat feeds
- Known Threat Indicators: None detected
- Campaign Affiliation: None identified
- Service Status: No open ports or active services detected
NEIGHBORHOOD CONTEXT
- Subnet Abuse Density: 0.7188 (high_abuse classification)
- Threat Siblings: 184 of 227 active addresses in /24 subnet flagged as threats
- Inherited Risk Score: 28
- Context: This IP operates within a high-density abuse subnet; adjacent IPs show similar risk patterns (risk scores 25-50)
HISTORICAL OBSERVATIONS
- Total Signals: 23 historical observations
- Recent Activity: Threat signals detected on 2026-06-28 with 3 associated threat pulses
- Persistence: No persistent malicious behavior pattern; threat observation count remains low (1)
- Stability: Ownership and network classification have remained stable
RELATIONSHIP GRAPH
- Total Relationships: 41 entities
- Primary Connections: Multiple same-network relationships to OVH-CUST-281059695
- Associated Networks: 142.44.128.0/17 (control plane)
RECOMMENDED ACTIONS
- Monitor outbound connections to this IP for potential command-and-control activity
- Apply firewall rules to block or rate-limit traffic to/from 142.44.228.0/24 subnet given high abuse density
- Correlate with similar-risk IPs in the 142.44.228.0/24 block for comprehensive threat assessment
- Verify geolocation discrepancies in security monitoring systems
RISK ASSESSMENT: MONITOR
This IP warrants continued monitoring due to its location within a high-abuse subnet, though current threat indicators are limited. The subnet's 71.88% abuse density suggests elevated risk for adjacent addresses.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Dmytro, Ahrefs Pte Ltd |
| ASN | AS16276 |
| Network Name | OVH-CUST-281059695 |
| CIDR Block | 142.44.228.0/24 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | proxy-ca016-san130.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-ca016-san130.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
No certificate
Issued by —
N/A
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 32% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 25% | 10 | 15 |
Coverage: 6/6 dimensions · Data sufficiency: sufficient
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Claimed geolocation contradicts RTT physics measurement
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-23 12:21:54 UTC |
| Last Seen | 2026-06-28 20:53:54 UTC |
| Profile Built | 2026-06-29 02:56:47 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 25 |
🔍 22 signal types · 25 observations collected
This report is generated from 22+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
ℹ️ About This Report
All data shown is publicly available network metadata — IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.