167.114.139.63📋 Copy

# IP Intelligence Briefing: 167.114.139.63

## Executive Summary

IP address 167.114.139.63/32 is a cloud infrastructure endpoint hosted on OVH in Montreal, Canada, with a moderate risk rating (40/100). The IP is associated with Ahrefs domain infrastructure and resolves to proxy-ca000-san63.ahrefs.net. No active malicious campaigns or known attacker indicators were observed.

## Ownership and Infrastructure

• ASN: 16276 (OVH)
• Organization: Dmytro, Ahrefs Pte Ltd
• Network: OVH-CUST-281059679
• Geolocation: Montreal, QC, Canada (with RTT validation discrepancies)
• Infrastructure Type: CloudCompute/Hosting
• Status: Firewalled/No Services (no open ports)

## Threat Assessment

• Risk Score: 40 (Moderate Risk)
• Abuse Confidence: Not calculated
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Status: 0 blacklists (1 DNSBL listing out of 8 total)
• Known Campaigns: None
• Campaign Likelihood: None

## Network Context and Neighborhood

The IP resides in subnet 167.114.139.0/24, classified as high abuse density (0.5078). The neighborhood contains:

• 256 total sibling IPs
• 224 active siblings
• 130 threat siblings
• Risk distribution: 84 medium, 16 low, 0 high risk IPs

This indicates the subnet has elevated abuse activity, though the specific IP shows no direct malicious indicators.

## DNS and Services

• Reverse DNS: proxy-ca000-san63.ahrefs.net
• Forward Resolution: Confirmed
• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None

## Historical Observations

22 observations recorded. Recent signals show:

• Consistent Canadian geolocation attribution
• High abuse density classification maintained
• Domain resolution to ahrefs.net stable
• No new threat indicators detected

## Recommended Actions

Based on current risk profile:

• Block: No immediate blocking required; monitor for changes
• Allow: Permitted traffic
• Monitor: Watch for service openings or risk score escalation
• Firewall Rules: No specific iptables/nftables rules generated

## Intelligence Conclusion

This IP represents a legitimate cloud hosting endpoint in OVH's Montreal infrastructure, associated with Ahrefs proxy services. While the neighborhood shows elevated abuse activity, no direct malicious indicators are present. Continue monitoring for service changes or risk score increases.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.