142.44.228.131📋 Copy

# IP INTELLIGENCE BRIEFING

IP Address: 142.44.228.131/32

Report Date: Current

Classification: Moderate Risk Infrastructure IP

---

## EXECUTIVE SUMMARY

IP 142.44.228.131 is a cloud hosting infrastructure address associated with OVH (ASN 16276) under network OVH-CUST-281059695. The IP resolves to Ahrefs infrastructure (proxy-ca016-san131.ahrefs.net) and exhibits moderate-risk characteristics. While the individual IP shows no active threat indicators, the hosting subnet demonstrates elevated abuse density, warranting network-level awareness.

---

## OWNERSHIP & INFRASTRUCTURE

Geolocation Data: Multiple sources indicate Canada (QC), though coordinates suggest geographic inconsistency. Geolocation consensus applies across 1 source.

---

## RISK ASSESSMENT

Overall Risk Score: 40/100 (Moderate)

Risk Classification: Moderate Risk

Risk Factors

• Abuse Confidence Score: Not applicable (no active abuse)
• Threat Indicators: None identified
• Blacklist Status: 0 threat feed entries; 1 DNSBL listing detected
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

---

## OBSERVATION HISTORY

Total Observations: 21 signals

Recent Activity Summary:

• 2026-06-19: Network operator score 0.2174 (Minimal), DNSSEC valid
• 2026-06-14: Subnet abuse density confirmed at 0.6055 (high_abuse classification)
• 2026-06-14: Network classification confirmed as OVH cloud hosting

Temporal Analysis: No persistent malicious threat behavior detected. IP shows stable ownership and infrastructure characteristics.

---

## NETWORK RELATIONSHIPS

Total Relationships: 46

Relationship Types: Same Network (OVH-CUST-281059695)

The IP demonstrates strong network-level associations within the OVH customer block. No external organizational or certificate relationships identified beyond the hosting provider infrastructure.

---

## SUBNET ANALYSIS (142.44.228.0/24)

Abuse Density: 0.6055 (High Abuse Classification)

Risk Distribution:

• High Risk: 0
• Medium Risk: 81
• Low Risk: 19
• Threat Siblings: 155 of 256 total IPs

Neighborhood Risk: Inherited risk score of 24 from subnet context. The subnet exhibits elevated abuse density typical of cloud hosting environments.

---

## NETWORK SERVICES

---

## SECURITY RECOMMENDATIONS

Recommended Action: MONITOR (No immediate blocking required)

1. Traffic Monitoring: The IP resolves to Ahrefs proxy infrastructure. Monitor for unusual traffic patterns from this address if your organization uses Ahrefs services.

2. Subnet Awareness: The parent subnet (142.44.228.0/24) shows high abuse density. Implement network-level monitoring for this /24 block.

3. DNS Filtering: One DNSBL listing detected. Consider filtering outbound DNS queries to this IP if it appears in DNS logs.

4. Cloud Infrastructure Context: This is a standard cloud hosting IP. Legitimate Ahrefs proxy traffic should pass through with normal business traffic policies.

---

## CONCLUSION

IP 142.44.228.131 represents legitimate cloud hosting infrastructure for Ahrefs services. The moderate risk score primarily reflects the high-abuse-density hosting environment rather than individual IP malicious activity. No immediate threat indicators present. SOC teams should monitor for traffic patterns consistent with web scraping or SEO tools rather than treating this as a standalone threat.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.