142.44.228.33📋 Copy

# IP Intelligence Briefing: 142.44.228.33/32

Classification: Moderate Risk | Date of Analysis: Current

Report ID: IP-142.44.228.33-BRIEF

---

## Executive Summary

IP 142.44.228.33 is assigned to OVH hosting infrastructure with a moderate risk score of 50. The address is hosted under the organization "Dmytro, Ahrefs Pte Ltd" (ASN 16276) within the 142.44.228.0/24 CIDR block in Beauharnois, Quebec, Canada. While the IP itself shows no active threat indicators, the residential subnet demonstrates elevated abuse density characteristics.

---

## Infrastructure Profile

---

## Threat Intelligence Indicators

• Abuse Confidence: No current threat indicators identified
• Blacklist Status: 0 blacklists (control plane shows 2 DNSBL listings out of 8 total checks)
• Known Campaigns: None associated
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Historical Signal Summary: 21 observations recorded. Recent activity on 2026-06-28 indicated high-severity listings with 8 total blacklist references. Ownership remains stable with zero ownership changes recorded.

---

## DNS Analysis

---

## Neighborhood Analysis (142.44.228.0/24)

• Abuse Density: 0.6719 (High Abuse classification)
• Total Siblings: 256
• Active Siblings: 210
• Threat Siblings: 172
• Inherited Risk: 26/100

Risk Distribution Within Subnet:

• High Risk: 0
• Medium Risk: 58
• Low Risk: 42

---

## Control Plane Assessment

• BGP Prefix: 142.44.128.0/17
• Route Stability: Not stable
• RPKI State: Not verified
• Route Changes (30-day): 0
• DNSSEC: Valid
• CAA Records: Present

---

## Recommended Security Actions

Status: Firewall rules generated for risk mitigation. No specific threat-based blocking required at this time.

Recommended Rules:

• iptables: `iptables -A INPUT -s 142.44.228.33 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 142.44.228.33 drop`
• nginx: `deny 142.44.228.33;`
• pfSense: `142.44.228.33/32`
• Cloudflare WAF: Block with expression `ip.src eq 142.44.228.33`
• AWS WAF: Include address `142.44.228.33/32` in rule set

---

## Intelligence Assessment

The IP 142.44.228.33 operates within OVH hosting infrastructure and resolves to an ahrefs.net proxy hostname, consistent with legitimate web infrastructure. No active threat indicators or malicious behavior have been observed. However, the parent subnet (142.44.228.0/24) exhibits high abuse density with 172 threat siblings among 256 total addresses, indicating potential collateral risk from neighboring IPs.

Recommendation: Monitor for changes in behavior or threat indicators. Apply precautionary blocking if threat context emerges. No immediate action required based on current profile.

---

*Report generated from IPDebrief intelligence platform. All data sourced from live network scans and threat intelligence feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.