167.114.139.45📋 Copy

## IP Intelligence Briefing: 167.114.139.45/32

Date: 2026-07-01

IP Address: 167.114.139.45/32

Risk Classification: Moderate Risk (Score: 40/100)

---

**Executive Summary**

IP 167.114.139.45 is a cloud hosting infrastructure address associated with Ahrefs Pte Ltd (OVH network). While the IP itself shows no active threat indicators, it resides within a /24 subnet (167.114.139.0/24) exhibiting high abuse density (0.7266). The address is currently firewalled with no open services detected. Recommended for monitoring and blocking at perimeter controls.

---

**Infrastructure Profile**

DNS Resolution: proxy-ca000-san45.ahrefs.net (ahrefs.net domain)

Service Status: No open ports detected

---

**Threat Assessment**

Current Threat Indicators:

• Abuse Confidence Score: None
• Blacklist Count: 1 (DNSBL listed)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Campaigns: None

Geolocation Validation: GeoPlausible flag = FALSE. RTT analysis (28ms) contradicts physical distance from Montreal (5,597km), suggesting proxying or data inconsistency.

---

**Subnet Analysis (167.114.139.0/24)**

• Abuse Density: 0.7266 (High Abuse)
• Subnet Classification: high_abuse
• Total Siblings: 256
• Active Siblings: 221
• Threat Siblings: 186
• Inherited Risk Score: 29

Risk Distribution Across Subnet:

• High Risk: 0 IPs
• Medium Risk: 52 IPs
• Low Risk: 48 IPs

---

**Observation History**

• Total Observations: 22 signals
• Threat Persistence Days: 0
• Ownership Changes: 0
• Recent Activity: Consistent cloud/hosting classification observed. DNS records for ahrefs.net domain confirmed.

---

**Relationship Graph**

• Total Relationships: 33
• Primary Association: Same Network (OVH-CUST-281059679)
• No unusual entity associations detected

---

**Recommended Actions**

Recommendation: Implement blocking rules at perimeter controls. Given the moderate risk score and high-abuse subnet environment, consider adding the entire /24 to a watchlist for correlation analysis.

---

**Analyst Notes**

1. The IP resolves to legitimate ahrefs.net infrastructure but operates in a high-abuse subnet environment

2. No direct threat activity observed on this specific address

3. Geographic validation failure warrants additional verification if traffic originates from this IP

4. Monitor for any changes in service availability or DNS configuration

Status: Monitor/Block

Confidence: Moderate

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.