142.44.225.28📋 Copy

THREAT INTELLIGENCE BRIEFING: 142.44.225.28/32

Classification: Low Risk / Cloud Infrastructure

Report Date: 2026-06-26

Analyst: IPDebrief Intelligence Division

---

EXECUTIVE SUMMARY

IP 142.44.225.28 is a low-risk (score: 25) cloud computing endpoint hosted on OVH infrastructure. The address resolves to aresolves to hostname proxy-ca017-san28.ahrefs.net, indicating it is part of the Ahrefs corporate network. No active services or open ports were detected; the IP is classified as "Firewalled / No Services."

---

OWNERSHIP & INFRASTRUCTURE

Organization: Dmytro, Ahrefs Pte Ltd

ASN: 16276 (OVH SAS)

CIDR Block: 142.44.225.0/24

Infrastructure Type: CloudCompute (OVH hosting provider)

Network Classification: Mixed abuse density environment

The IP belongs to a subnet with 224 active siblings out of 256 total addresses. Abuse density for the /24 block is 0.3906 (39%), with 100 threat siblings identified. The subnet is classified as "mixed" with a 53% distribution of medium-risk neighbors.

---

THREAT INDICATORS

Current Risk Assessment:

• Risk Score: 25/100 (Low Risk)
• Provider Score: 0/100
• Authority Score: 0/100
• Abuse Confidence Score: Not scored
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False

Threat Indicators: None detected. No active threat feeds, campaigns, or reputation source alerts.

---

NETWORK SERVICES & DNS

DNS Resolution: proxy-ca017-san28.ahrefs.net (Ahrefs.net)

PTR Hostnames: proxy-ca017-san28.ahrefs.net

Forward Resolution: Confirmed (1 hostname)

Email Auth: No SPF or DMARC records detected

Open Ports: None

TLS Certificate: None

HTTP Banner: None

The IP shows no active services. DNS resolution is confirmed, but email authentication mechanisms are absent.

---

GEOLOCATION ANALYSIS

Primary Location: CA (Canada) / QC (Quebec)

Secondary Location: Singapore

Geo Consensus: Inconsistent (plausible: false)

RTT Validation: Violation detected (31ms observed vs. 112ms minimum for 5,598km distance)

Probe Count: 5

Geolocation data shows significant inconsistency. The IP is geographically assigned to Canada but DNS records suggest Singapore. RTT measurements indicate a geolocation anomaly with a violation of minimum propagation distance calculations.

---

TEMPORAL ANALYSIS

Ownership Stability: Stable (0 ownership changes)

Threat Persistence: 0 days (not persistently malicious)

Threat Observation Count: 1

Route Stability: Unstable (isRouteStable: false)

Route Changes (30d): 0

Delegation Age: Not established

The IP shows stable ownership with minimal threat activity. No persistent malicious behavior patterns observed.

---

NEIGHBORHOOD CONTEXT

Subnet: 142.44.225.0/24

Total Siblings: 256

Active Siblings: 224

Threat Siblings: 100

Abuse Density: 0.3906 (39%)

Inherited Risk: 15/100

The /24 subnet exhibits moderate abuse activity. Risk distribution: 53 medium-risk IPs, 47 low-risk IPs, 0 high-risk IPs. Sample neighbors include:

• 142.44.225.0: Risk 40
• 142.44.225.1: Risk 25
• 142.44.225.2: Risk 40
• 142.44.225.4: Risk 50

---

RECOMMENDED ACTIONS

Security Recommendations:

1. Allow Traffic: No blocking recommended. IP is classified as low-risk corporate infrastructure.

2. Monitor DNSBL: Review the single DNSBL listing to determine if additional filtering is warranted.

3. Geo-Location Verification: Consider implementing geo-validation rules due to inconsistent location data.

4. No Firewall Rules Required: No active services detected; no port-based rules needed.

5. Relationship Monitoring: Monitor for activity patterns consistent with Ahrefs.net infrastructure.

Classification: LOW RISK - No immediate action required. Monitor as part of standard cloud infrastructure traffic.

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.