142.44.225.207📋 Copy

INTELLIGENCE BRIEFING: 142.44.225.207/32

Classification: Low Risk | Risk Score: 25/100

Date: 2026-06-26

Analyst: IPDebrief Intelligence Team

---

Executive Summary

IP address 142.44.225.207 is classified as Low Risk with a risk score of 25/100. The address is hosted on OVH cloud infrastructure (ASN 16276) under the organization "Dmytro, Ahrefs Pte Ltd." While the IP itself shows minimal direct threat indicators, the surrounding /24 subnet exhibits elevated abuse density, warranting contextual awareness.

Network Ownership & Infrastructure

• Provider: OVH (CloudCompute infrastructure)
• ASN: 16276 (OVH SAS)
• Organization: Dmytro, Ahrefs Pte Ltd
• CIDR Block: 142.44.225.0/24
• Geolocation: Canada (QC) / Singapore (inconsistent reporting)
• Infrastructure Type: Cloud Hosting
• DNS PTR: proxy-ca017-san207.ahrefs.net (ahrefs.net)

Threat Assessment

Direct threat indicators for this IP are minimal:

• Abuse Confidence Score: Not reported
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Blacklist Status: Listed on 1 of 8 DNSBL feeds
• Known Campaigns: None identified

Neighborhood Analysis

The /24 subnet (142.44.225.0/24) shows mixed classification with inherited risk of 15:

• Abuse Density: 0.3906 (39% of active siblings flagged as threats)
• Active Siblings: 224/256
• Threat Siblings: 100
• Risk Distribution: 53 medium-risk, 47 low-risk neighbors
• Control Plane: Route stability issues detected (isRouteStable: false)

Historical Observations

Signal history indicates recent activity with 20 observations logged on 2026-06-26. Key temporal signals include:

• Subnet abuse density reporting at 0.3906
• ASN/geolocation signals from AlienVault OTX and Cymru
• DNS resolution confirmed for ahrefs.net with CAA records
• Operator score: 0.2174 (Minimal)

Related Entities

• 55 Relationship Links: Primarily network-level associations to OVH-CUST-281059696
• Campaign Correlation: No matching campaigns or correlated IPs identified

Recommended Actions

No specific firewall or mitigation rules are recommended for this IP at this time. The low risk score (25) and lack of direct threat indicators suggest standard monitoring is appropriate.

SOC Analyst Notes

1. Monitor Context: While this IP is low-risk, the subnet abuse density (39%) indicates potential collateral risk from neighboring addresses

2. Geolocation Inconsistencies: Report shows Canada (QC) with Singapore coordinates—verify actual deployment location if needed

3. DNSBL Listing: One DNSBL listing detected; review if listing source is relevant to your threat landscape

4. Infrastructure Type: Cloud-hosted environment (OVH)—consider tenant isolation implications for lateral threat movement

Status: No immediate blocking required. Maintain monitoring given neighborhood risk profile.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.