142.44.228.9📋 Copy

# IP Intelligence Briefing: 142.44.228.9

## Executive Summary

IP 142.44.228.9 presents a moderate-risk profile (Risk Score: 40/100) associated with OVH cloud infrastructure. The address belongs to the ahrefs.net network and operates as a firewalled cloud compute endpoint. While the IP itself shows no active threat indicators, the /24 subnet demonstrates high-abuse characteristics with 157 threat siblings among 194 active addresses.

## Infrastructure Profile

Ownership & Network: ASN 16276, organization Dmytro Ahrefs Pte Ltd. CIDR block 142.44.228.0/24 registered under OVH-CUST-281059695.

Geolocation: Reports indicate Canadian country code (CA) with Singapore city designation, suggesting potential geolocation discrepancies in routing data. 3,000km accuracy radius reported.

Infrastructure Type: Cloud compute infrastructure hosted on OVH platform. No CDN, proxy, VPN, or Tor exit node indicators.

DNS Resolution: PTR hostname proxy-ca016-san9.ahrefs.net. Forward resolution confirmed with single hostname mapping. No SPF or DMARC email authentication records detected.

Services: No open ports detected; endpoint classified as firewalled with no active services.

## Risk Assessment

Risk Score: 40/100 (Moderate Risk)

Threat Indicators:

• 1 DNSBL listing among 8 total blacklist checks
• No Tor exit node, known attacker, or spam source indicators
• No active threat campaigns or associated malware signatures
• Provider score and authority scores at 0

Network Role: Cloud compute infrastructure with firewalled/no services designation. Operator score: 0.4783 (Basic level).

## Neighborhood Context

Subnet: 142.44.228.0/24

Abuse Density: 0.6133 (high_abuse classification)

Neighborhood Statistics:

• Total siblings: 256
• Active siblings: 194
• Threat siblings: 157
• Inherited risk: 24

Risk Distribution in /24: 0 high-risk, 81 medium-risk, 19 low-risk addresses. Sample of 100 neighboring IPs shows consistent risk scores between 40-50.

## Temporal Analysis

Observation History: 22 historical observations collected. Recent activity (June 2026) shows consistent cloud infrastructure classification. No ownership changes detected. Threat persistence days: 0. Not classified as persistently malicious.

## Relationship Graph

• Multiple relationships to OVH-CUST-281059695 network
• DNS associations to proxy-ca016-san9.ahrefs.net (11 relationship entries)

## Recommended Actions

Monitoring & Mitigation:

1. Apply moderate-risk filtering policies for 142.44.228.0/24 subnet due to high neighborhood abuse density (0.6133)

2. Monitor for lateral movement from related IPs within the /24 block (157 threat siblings identified)

3. Consider blocking or rate-limiting traffic from this subnet if enterprise environment shows exposure

4. No immediate takedown required; threat indicators not currently active at endpoint level

Firewall Rules: Implement allow-listing only if legitimate ahrefs.net business use is confirmed. Default recommendation: Monitor and log all traffic, apply rate limiting.

Priority: Low-Medium. Address requires monitoring due to neighborhood context despite clean individual profile.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.