142.44.228.96📋 Copy

IP Intelligence Briefing: 142.44.228.96

*Generated via IPDebrief tools: Profile, History, Relationships, Neighbors*

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership:

- AS16276 (OVH)

- Organization: Dmytro, Ahrefs Pte Ltd

- Network: OVH-CUST-281059695

• Geolocation:

- Country: Canada (CA)

- Region: QC (Quebec)

- City: Singapore (discrepancy; likely data error)

- Coordinates: Latitude 56.13, Longitude -106.35 (approx. 3,000km accuracy radius)

• Network Role:

- Cloud Hosting: OVH CloudCompute infrastructure

- Services: No open ports, no TLS/HTTP services detected

---

**2. Threat & Abuse Indicators**

• Threat Signals:

- No direct malicious indicators (no malware, phishing, or exploit campaigns).

- DNSBL Listing: 1/8 DNSBL lists (low confidence).

• Subnet Abuse:

- /24 Subnet (142.44.228.0/24): 100 IPs, 0% abuse density reported, but 77 IPs flagged as medium/high risk.

---

**3. Historical Observations (Last 30 Days)**

• Key Trends:

- Stable risk score (40) with no persistent malicious activity.

- DNS Resolution: Consistent linkage to `proxy-ca016-san96.ahrefs.net` (Ahrefs domain).

- Geolocation: Mixed results (Canada vs. Singapore).

- Operator Score: Minimal risk (0.2174).

---

**4. Network Relationships**

• Primary Associations:

- OVH Network: 254 sibling IPs in the same /24 subnet.

- DNS: Linked to `ahrefs.net` (no email auth records).

- Certificates: No TLS certificates detected.

• Subnet Context:

- Abuse Density: 61.42% (high_abuse classification).

- Inherited Risk: 24 (likely from parent network).

---

**5. Recommendations for SOC**

1. Monitor DNS Activity: Track `proxy-ca016-san96.ahrefs.net` for unusual traffic patterns.

2. Verify Geolocation: Investigate the Singapore/Canada discrepancy; possible misconfiguration or spoofing.

3. Subnet Analysis: Focus on high-risk neighbors in the 142.44.228.0/24 subnet.

4. DNSBL Check: Confirm the IP’s status on DNSBL lists and assess potential spam risks.

---

Conclusion: This IP is associated with Ahrefs, a legitimate company, but exhibits low-confidence abuse indicators. While not directly malicious, its subnet’s high abuse density and DNSBL listing warrant closer monitoring. No immediate action is required, but ongoing surveillance is advised.

*Data sourced from IPDebrief’s threat intelligence platform.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.