142.44.225.94📋 Copy

# IP Intelligence Briefing: 142.44.225.94/32

## Executive Summary

IP 142.44.225.94 is a cloud computing infrastructure address assigned to OVH (ASN 16276) operating under customer OVH-CUST-281059696. The address demonstrates moderate risk (Score: 40) with elevated neighborhood abuse density. No active threat indicators were identified, but the subnet shows persistent high-abuse classification.

## Infrastructure Profile

• Organization: Dmytro, Ahrefs Pte Ltd
• Network Block: 142.44.225.0/24
• Infrastructure Type: CloudCompute (OVH)
• Status: Cloud Hosting (No services detected)
• DNS Resolution: proxy-ca017-san94.ahrefs.net
• Geolocation: Reported Canada (CA), but geolocation validation flagged implausible location with 5597km distance discrepancy and 27ms RTT vs. 112ms minimum possible for that distance

## Threat Assessment

• Overall Risk Score: 40/100 (Moderate Risk)
• Abuse Confidence: Not quantified
• Blacklist Status: 0 known blacklists
• DNSBL Status: 1 of 8 DNSBL lists flagged
• Tor/Proxy: Not identified as Tor exit, VPN, or proxy
• Known Campaigns: None detected

## Neighborhood Intelligence

The /24 subnet (142.44.225.0/24) exhibits concerning abuse patterns:

• Abuse Density: 0.6719 (High)
• Subnet Classification: high_abuse
• Active IPs: 224 of 256
• Threat Siblings: 172
• Inherited Risk Score: 26

The neighborhood context suggests this subnet is actively used for high-abuse activities, though this specific IP lacks direct threat indicators.

## Control Plane Analysis

• Operator Score: 0.2609 (Basic)
• Route Stability: Stable (no route changes in 30 days)
• BGP Prefix: 142.44.128.0/17
• RPKI/IRR: Status not validated
• Delegation Age: 9,230 days

## Observed Timeline

29 observations recorded across June 2026. Signals remained consistent with cloud hosting infrastructure. No escalation in threat posture observed.

## SOC Recommendations

1. Monitor Subnet Context: The /24 subnet shows 67% abuse density. Consider blocking or rate-limiting traffic from 142.44.225.0/24 if threat correlation occurs.

2. Geolocation Anomaly: The distance/RTT discrepancy may indicate routing anomalies or geolocation spoofing. Verify source of truth for geolocation data.

3. DNSBL Validation: Investigate the single DNSBL listing for potential reputation issues.

4. No Immediate Action Required: No active threat indicators or malicious campaigns detected for this specific IP.

## Actionable Firewall Rules

No specific firewall rules generated. Consider implementing subnet-level controls for the 142.44.225.0/24 block given the elevated abuse density in the neighborhood.

---

*Generated by IPDebrief Intelligence Platform*

*Analysis Date: 2026-06-22*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.