142.44.225.243📋 Copy

# IP Intelligence Briefing: 142.44.225.243/32

Classification: Moderate Risk Infrastructure Host

Date Generated: 2026-06-17

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 142.44.225.243 is a cloud-hosted infrastructure endpoint registered to Ahrefs Pte Ltd (OVH infrastructure) with a moderate risk score of 50. The IP exhibits no direct threat indicators but is located within a high-abuse density subnet (142.44.225.0/24) and is listed on multiple DNSBL sources.

---

## Infrastructure Profile

---

## Threat Assessment

Direct Threat Indicators: None detected

• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Abuse Confidence Score: Null

Blacklist Status:

• DNSBL Listed: 2 of 8 total lists
• Max Severity: High

Geolocation Anomaly:

• Reported country: CA (Canada)
• Reported city: Singapore
• RTT Violation: 23ms observed vs 112ms minimum possible for 5,598km distance
• Geo validation flagged as implausible

---

## Neighborhood Analysis

Subnet: 142.44.225.0/24

• Abuse Density: 0.6641 (High Abuse Classification)
• Total Siblings: 256
• Active Siblings: 206
• Threat Siblings: 170
• Inherited Risk: 26

The subnet exhibits elevated abuse activity with 66% of peers classified as threat siblings.

---

## Historical Observations (19 Total)

Recent signal activity includes:

• 2026-06-17: 8 blacklist listings (2 active, high severity)
• 2026-06-15: Subnet abuse density signals (0.6641, high_abuse classification)
• 2026-06-15: Operator score 0.2174 (Minimal)
• 2026-06-15: Full profile scan with 6 dimensions covered

Threat Persistence: 0 days

Observation Count: 0 persistent threat observations

---

## Network Relationships

Primary DNS Association:

• proxy-ca017-san243.ahrefs.net (ahrefs.net domain)

Network Affiliations:

• Multiple relationships to OVH-CUST-281059696 network block

Total Relationships: 29 (15 network, 14 DNS associations)

---

## Recommended Actions

Monitoring:

• Monitor DNSBL listing status (2 of 8 lists)
• Track subnet abuse density changes in 142.44.225.0/24
• Validate geolocation consistency

Firewall Rules:

• No specific blocking recommendations due to lack of direct threat indicators
• Consider rate-limiting due to high-abuse subnet context

Investigation Priority: Low-Medium

*Reason: Infrastructure IP with legitimate ownership but elevated neighborhood risk*

---

Conclusion: This IP represents legitimate Ahrefs infrastructure hosting services, operating within an OVH cloud environment. The moderate risk rating stems primarily from subnet-level abuse characteristics rather than individual IP malicious activity. No immediate blocking is warranted, but continued monitoring of DNSBL status and neighborhood activity is recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.