142.44.228.48📋 Copy

IP Intelligence Briefing: 142.44.228.48/32

*Generated via IPDebrief Analysis*

---

**1. Core Profile**

• Risk Score: Moderate (50/100)
• Ownership:

- ASN: 16276 (OVH)

- Organization: Dmytro, Ahrefs Pte Ltd

- Network: 142.44.228.0/24 (OVH-CUST-281059695)

• Geolocation:

- Country: Canada (CA)

- City: Singapore (discrepancy noted; geolocation plausibility flag: False)

- Coordinates: Unavailable

• Threat Indicators:

- No malicious activity detected (no abuse confidence, blacklist, or campaign ties).

- DNS: Resolves to `proxy-ca016-san48.ahrefs.net` (Ahrefs, SEO tools provider).

---

**2. Network Behavior**

• Hosting Role: Identified as a cloud-hosted infrastructure (OVH provider).
• Services:

- No open ports or TLS certificates detected.

- No HTTP server banners or active services.

• Control Plane:

- BGP Prefix: 142.44.128.0/17

- Route Stability: Stable (no recent route changes).

- DNSSEC: Validated.

- CAA Records: Present, indicating DNS security configuration.

---

**3. Observation History (Last 30 Days)**

• Risk Trends:

- Moderate risk score (50) with no significant changes.

- Threat Observations: 1 total (no escalation).

• Geolocation Anomalies:

- RTT Discrepancy: 27ms observed for 5,598km distance (implausible).

- GeoPlausibility: Flagged as False (potential spoofing or misconfigured DNS).

---

**4. Network Relationships**

• Linked Entities:

- Subnets: 142.44.228.0/24 (OVH-CUST-281059695).

- Organizations: Ahrefs Pte Ltd (OVH customer).

- Domains: `ahrefs.net` (DNS resolver).

• Threat Correlation:

- No direct links to known malicious campaigns or threat feeds.

---

**5. Subnet Neighborhood (142.44.228.0/24)**

• Abuse Density: 0.53 (moderate risk).
• Neighbor Analysis:

- Total Siblings: 254 IPs.

- Active IPs: 167 (65% utilization).

- Threat IPs: 135 (53% of subnet).

- Risk Distribution:

- Low: 23 IPs

- Medium: 77 IPs

- High: 0 IPs

---

**6. Recommendations**

• Monitoring:

- Track geolocation anomalies (e.g., Singapore vs. Canada).

- Monitor subnet for increased threat activity (current abuse density: 0.53).

• Network Segmentation:

- Consider isolating high-risk neighbors in the 142.44.228.0/24 subnet.

• DNS Verification:

- Validate DNS records for `ahrefs.net` to confirm legitimate resolution.

---

Conclusion:

142.44.228.48 is a legitimate OVH-hosted IP associated with Ahrefs, a legitimate SEO provider. While no direct threats are detected, geolocation inconsistencies and moderate subnet abuse density warrant further investigation. No immediate action is required, but ongoing monitoring is advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.