142.44.233.27📋 Copy

IP INTELLIGENCE BRIEFING

Target: 142.44.233.27/32

Classification: Moderate Risk (Score: 40)

Date: Current Analysis

---

OWNERSHIP & INFRASTRUCTURE

The IP is assigned to ASN 16276 under organization "Dmytro, Ahrefs Pte Ltd" (OVH-CUST-281059682). Geolocation data indicates Canada (CA) with Singapore city reference. DNS PTR records resolve to proxy-ca003-san27.ahrefs.net, confirming association with Ahrefs infrastructure. The IP is hosted on OVH cloud infrastructure with no open ports detected (firewalled/no services).

THREAT INDICATORS

Direct threat indicators are absent: no known attacker reputation, not a Tor exit node, not flagged as spam source. Blacklist count reports 0. However, the IP exhibits one DNSBL listing across 8 total lists. Operator score classified as "Minimal" (0.2174).

SUBNET CONTEXT

The /24 subnet (142.44.233.0/24) demonstrates elevated abuse density of 0.6133, classified as "high_abuse." Of 256 total sibling IPs, 196 are actively assigned and 157 show threat indicators. Risk distribution across subnet: 94 medium-risk IPs, 6 low-risk, 0 high-risk. Inherited risk from subnet context: 24.

NETWORK RELATIONSHIPS

The IP maintains 38 network relationships, all classified as "Same Network" pointing to OVH-CUST-281059682. This confirms the IP operates within a consolidated hosting block with shared infrastructure characteristics.

OBSERVATION HISTORY

Historical data from June 2026 shows consistent cloud hosting classification (OVH) with no ownership changes. Threat observation count: 1. The IP is not marked as persistently malicious. No significant temporal shifts in risk posture observed.

RECOMMENDED ACTIONS

Based on risk profile and subnet context, the following actions are recommended:

* Firewall Rules: Block traffic from 142.44.233.27/32

* iptables: `iptables -A INPUT -s 142.44.233.27 -j DROP`

* nftables: `nft add rule inet filter input ip saddr 142.44.233.27 drop`

* nginx: `deny 142.44.233.27;`

* Cloudflare WAF: Block IP with expression `ip.src eq 142.44.233.27`

* AWS WAF: Add 142.44.233.27/32 to blocked addresses

ASSESSMENT

This IP presents moderate risk primarily due to subnet-level abuse density rather than direct malicious indicators. The high abuse classification of the /24 block warrants defensive blocking despite the IP's association with legitimate Ahrefs infrastructure. Recommend combining this rule with contextual threat intelligence before enforcement.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.