167.114.139.83📋 Copy

IP Intelligence Briefing: 167.114.139.83

*Generated via IPDebrief tools (Profile, History, Relationships, Neighbors)*

---

**Risk Assessment**

• Risk Score: 25 (Low Risk)
• Provider Score: 0 (No provider-based risk detected)
• Authority Score: 0 (No authoritative malicious activity)
• Stability: Stable network (no recent route changes)
• Threat Indicators: No active malware, phishing, or spam associations.

---

**Ownership & Geolocation**

• Registered To: Ahrefs Pte Ltd (OVH customer, ASN 16276)
• Location: Montreal, Canada (QC)
• Network Role: Hosting provider (OVH infrastructure)
• Subnet: 167.114.139.0/24 (mixed risk density: 42.63% abuse)

---

**Observed Activity**

• DNS: Resolves to `proxy-ca000-san83.ahrefs.net` (no email auth records).
• Services: No open ports or TLS certificates detected.
• Network Behavior:

- Cloud-hosted infrastructure (OVH).

- NoVPN, no Tor, no residential/mobile traffic.

- DNSSEC valid, CAA records present.

---

**Threat & Abuse Context**

• DNSBL Listings: 1 out of 8 lists (low priority).
• Subnet Abuse: 107 malicious IPs in the 167.114.139.0/24 subnet (42.63% abuse density).
• Historical Trends: No persistent threats or ownership changes.

---

**Relationships & Neighbors**

• Linked Entities:

- Same network (OVH-CUST-281059679).

- DNS hostname `proxy-ca000-san83.ahrefs.net` (Ahrefs proxy).

• Neighbor Risk:

- 107 malicious IPs in subnet (high-risk neighbors: 67).

- 167.114.139.83 has a low-risk score (25) but resides in a mixed-risk network.

---

**Actionable Insights**

1. Monitor Subnet: The 167.114.139.0/24 subnet has a notable abuse density. Investigate if this IP shares infrastructure with known malicious actors.

2. Verify DNS: The `proxy-ca000-san83.ahrefs.net` hostname is linked to the IP. Confirm if this is a legitimate Ahrefs service or a spoofed entry.

3. Network Segmentation: Since the IP is part of a hosting provider’s network, ensure segmentation between customer-facing and internal services.

4. DNSBL Check: While the IP is not directly listed in high-risk DNSBLs, monitor for changes in its subnet’s abuse profile.

---

Conclusion: 167.114.139.83 is a low-risk IP associated with Ahrefs’ OVH hosting infrastructure. While no direct threats are detected, its subnet contains a significant number of malicious IPs. SOC teams should prioritize monitoring the subnet for lateral movement or shared infrastructure risks.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.