142.44.225.205📋 Copy

# IP Intelligence Briefing: 142.44.225.205/32

## Executive Summary

IP 142.44.225.205 is a cloud-hosted address associated with OVH infrastructure, resolving to proxy infrastructure for the ahrefs.net domain. The IP carries a moderate risk score of 40 and is hosted within a subnet exhibiting high abuse density.

## Infrastructure Profile

• Organization: Dmytro, Ahrefs Pte Ltd
• ASN: 16276 (OVH)
• Netname: OVH-CUST-281059696
• CIDR Block: 142.44.225.0/24
• Registration RIR: ARIN
• Infrastructure Type: CloudCompute / Hosting
• Service Purpose: Firewalled / No Services Detected

## Geolocation & Network Data

• Country: CA (Canada)
• Region: QC (Quebec)
• City: Singapore (reported; accuracy radius 3000km)
• DNS PTR: proxy-ca017-san205.ahrefs.net
• Forward Resolution: proxy-ca017-san205.ahrefs.net (unconfirmed)
• DNSSEC Valid: true

## Risk Assessment

• Overall Risk Score: 40 (Moderate Risk)
• Abuse Confidence Score: Not available
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists
• Campaign Correlation: None identified
• Threat Indicators: No direct indicators (not Tor exit, not known attacker, not spam source)

## Neighborhood Analysis

The /24 subnet (142.44.225.0/24) shows elevated abuse characteristics:

• Abuse Density: 0.6641 (High Abuse Classification)
• Total Siblings: 256
• Active Siblings: 206
• Threat Siblings: 170
• Inherited Risk Score: 26
• Risk Distribution in Subnet: 53 Medium Risk, 47 Low Risk

## Control Plane Observations

• BGP Prefix: 142.44.128.0/17
• Origin ASN: 16276
• Route Stability: Unstable
• Operator Score: 0.2174 (Minimal)
• DNSSEC Validation: Valid
• CAAA Records: Present

## Historical Observations

Analysis of 20 signal observations indicates:

• Recent classification consistently shows "high_abuse" subnet designation
• Abuse density maintained at 0.6641 across recent observations
• One historical observation (2026-06-14) shows geolocation with country CA and region QC
• No persistent malicious behavior detected

## Threat Context

• Campaign Likelihood: None
• Certificate Matches: 0
• Banner Matches: 0
• Correlated IPs: 0
• Known Campaigns: None identified

## Recommended Actions

Based on the moderate risk profile, the following firewall rules are recommended:

iptables:

```

iptables -A INPUT -s 142.44.225.205 -j DROP

```

nftables:

```

nft add rule inet filter input ip saddr 142.44.225.205 drop

```

nginx:

```

deny 142.44.225.205;

```

Cloudflare WAF:

```json

{

"description": "Block 142.44.225.205 — IPDebrief risk score 40",

"action": "block",

"filter": {"expression": "ip.src eq 142.44.225.205"}

}

```

AWS WAF:

```json

{

"Addresses": ["142.44.225.205/32"],

"Description": "IPDebrief risk 40"

}

```

## Intelligence Assessment

IP 142.44.225.205 represents proxy infrastructure for ahrefs.net hosted on OVH cloud infrastructure. While no direct threat indicators are present, the subnet exhibits elevated abuse density with 170 of 256 sibling IPs flagged as threats. The IP should be evaluated in the context of its network neighborhood for potential lateral threat indicators. No evidence of persistent malicious activity or campaign association was identified.

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.