142.44.225.31📋 Copy

IP INTELLIGENCE BRIEFING

Subject: 142.44.225.31/32

Classification: Defensive Network Intelligence

Generated: Current Session

---

EXECUTIVE SUMMARY

IP 142.44.225.31 presents as a low-risk cloud infrastructure endpoint operating within a high-abuse density subnet. The address is associated with OVH hosting infrastructure and resolves to a hostname under the ahrefs.net domain. While individual threat indicators remain absent, the subnet context warrants contextual awareness.

---

IP PROFILE AND RISK ASSESSMENT

• Risk Score: 30 (Low Risk classification)
• Reputation: Low Risk
• Provider Score: 0
• Authority Score: 0
• Infrastructure Type: CloudCompute (OVH hosting)
• Network Role: Firewalled/No Services detected
• Open Ports: None detected during scan
• TLS Certificate: None detected

---

OWNERSHIP AND REGISTRATION

• ASN: 16276 (OVH)
• Organization: Dmytro, Ahrefs Pte Ltd
• Netname: OVH-CUST-281059696
• CIDR Block: 142.44.225.0/24
• RIR: ARIN
• Control Plane: Origin ASN 16276, BGP prefix 142.44.128.0/17
• Route Stability: Stable (0 route changes in 30 days)
• RPKI State: Valid
• DNSSEC: Valid

---

DNS AND DOMAIN INTELLIGENCE

• PTR Hostname: proxy-ca017-san31.ahrefs.net
• Resolved Domain: ahrefs.net
• Forward Resolution: 1 hostname confirmed
• Email Authentication: SPF and DMARC records not configured
• TXT Record Count: 0

---

GEOLOCATION ANALYSIS

• Reported Country: CA (Canada)
• Reported City: Singapore
• Geographic Validation: Failed (plausible flag false)
• RTT Validation: Violation detected

- Measured RTT: 28ms

- Minimum Possible RTT for 5,597km distance: 112ms

- Discrepancy indicates geolocation data inconsistency

• Probe Count: 5
• Average RTT: 30ms

---

THREAT INDICATORS

• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False
• Abuse Confidence Score: Null
• Threat Persistence Days: 0
• Is Persistently Malicious: False

---

SUBNET CONTEXT (142.44.225.0/24)

• Abuse Density: 0.6953 (High Abuse classification)
• Subnet Classification: High Abuse
• Total Siblings: 256
• Active Siblings: 223
• Threat Siblings: 178
• Inherited Risk Score: 27
• Neighbor Count Analyzed: 100
• Risk Distribution: High (0), Medium (28), Low (72)

---

HISTORICAL OBSERVATIONS

• Total Observations: 27
• Recent Activity: June 2026
• Observation Timeline:

- 2026-06-28: Cloud hosting classification (OVH provider) confirmed

- 2026-06-20: High abuse subnet classification recorded

- 2026-06-20: Control plane operator score 0.6522 (Moderate)

• Ownership Changes: 0
• Threat Observation Count: 1

---

NETWORK RELATIONSHIPS

• Primary Network Association: OVH-CUST-281059696
• Relationship Count: 39
• Relationship Types: Same Network (OVH hosting customer block)
• Organizational Links: No direct organization relationships detected
• Hostname Links: proxy-ca017-san31.ahrefs.net

---

RECOMMENDED ACTIONS

No immediate firewall rules or blocking actions recommended based on current risk profile. The IP presents as a legitimate cloud hosting endpoint with low individual threat indicators.

Contextual Considerations:

• Monitor subnet-level abuse density (0.6953) for potential lateral threat vectors
• Consider geo-location validation discrepancies when correlating with other intelligence
• No immediate action required at this time; maintain normal monitoring procedures

---

INTELLIGENCE SUMMARY

IP 142.44.225.31 operates as a firewalled cloud endpoint within OVH hosting infrastructure. The address shows no active malicious indicators, though it resides in a subnet with elevated abuse density. The geolocation data contains inconsistencies requiring contextual interpretation. Current threat posture is low-risk with no actionable indicators requiring immediate defensive response.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.