142.44.225.202📋 Copy

# IP INTELLIGENCE BRIEFING: 142.44.225.202/32

Classification: LOW RISK

Report Date: 2026-06-20

Analysis Tool: IPDebrief Intelligence Platform

---

## EXECUTIVE SUMMARY

IP address 142.44.225.202 is a low-risk infrastructure endpoint hosted on OVH cloud computing infrastructure. The IP resolves to legitimate Ahrefs.net proxy infrastructure (proxy-ca017-san202.ahrefs.net) and shows no active threat indicators. Despite operating within a high-abuse-density subnet, the IP itself maintains a clean reputation score of 30 with no known malicious associations.

---

## INFRASTRUCTURE PROFILE

---

## OBSERVATION HISTORY

Total Observations: 26 signals recorded

Threat Persistence: 0 days

Notable Observations:

• 2026-06-20: DNS resolution to ahrefs.net (CAA records validated)
• 2026-06-15: Operator score rated Moderate (0.6522) with valid RPKI state
• 2026-06-09: Subnet abuse density flagged at 0.5625 (high_abuse classification)

Trend Analysis: Consistent infrastructure behavior with no escalation in threat profile. Ownership has remained stable with zero changes recorded.

---

## NETWORK RELATIONSHIPS

DNS Associations: proxy-ca017-san202.ahrefs.net (14 instances)

Network Relationships: OVH-CUST-281059696 (13 instances)

Associated Domains: ahrefs.net

Control Plane: BGP prefix 142.44.128.0/17, route stable (0 changes in 30 days), RPKI state valid

---

## NEIGHBORHOOD ANALYSIS

Subnet: 142.44.225.0/24

Abuse Density: 0.5625 (HIGH)

Active Siblings: 174 out of 256 total

Threat Siblings: 144 identified

Inherited Risk: 22

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 97
• Low Risk: 3

The subnet exhibits elevated abuse density consistent with OVH cloud hosting patterns. However, the subject IP (142.44.225.202) demonstrates distinct separation from neighbor threat profiles.

---

## THREAT INDICATORS

---

## TECHNICAL SERVICES

• Open Ports: None detected
• TLS Certificate: N/A
• HTTP Title: N/A
• Server Banner: N/A
• Email Authentication: SPF: No, DMARC: No
• DNS Records: 1 PTR hostname, forward resolution confirmed

---

## RECOMMENDED ACTIONS

No immediate blocking or firewall rules recommended. The IP demonstrates legitimate infrastructure behavior consistent with commercial proxy services.

SOC Analyst Guidance:

• Monitor for changes in DNS resolution patterns
• Verify traffic patterns align with expected Ahrefs.net operations
• No action required based on current risk profile
• Maintain standard logging practices for network baseline

---

## RISK ASSESSMENT

Overall Risk Rating: LOW

Recommended Action: MONITOR

Confidence Level: HIGH (based on 26 historical observations)

The IP address represents legitimate commercial infrastructure hosted on OVH cloud computing services. While the subnet exhibits elevated abuse density, the specific IP maintains clean threat indicators and resolves to established Ahrefs.net proxy infrastructure. No defensive action required at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.