142.44.233.162📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 142.44.233.162/32

Classification: Moderate Risk / Hosting Infrastructure

Report Generated: Current

---

## EXECUTIVE SUMMARY

IP 142.44.233.162 is a cloud-hosted infrastructure address assigned to OVH (ASN 16276) under customer allocation OVH-CUST-281059682. The IP is associated with the ahrefs.net domain and resolves to proxy-ca003-san162.ahrefs.net. Risk assessment indicates moderate risk (score: 50) with no active threat indicators. The subnet exhibits elevated abuse density, warranting defensive awareness but not immediate blocking without additional context.

---

## OWNERSHIP & INFRASTRUCTURE

Key Observation: No open ports detected. The IP is actively firewalled, indicating defensive hardening by the operator.

---

## GEOSPATIAL ANALYSIS

Anomaly Detected: Significant geolocation discrepancy. Probed RTT (30-37ms) is inconsistent with claimed distance of 5,597.9km from probe origin. Minimum possible RTT for that distance is 112ms. This suggests the claimed geolocation is unreliable or the IP may be misattributed.

---

## THREAT INDICATORS

Assessment: No active threat indicators present. The two DNSBL listings are historical or low-severity entries requiring review.

---

## NEIGHBORHOOD ANALYSIS

Subnet: 142.44.233.162/24

Observation: The /24 subnet demonstrates elevated abuse density with 147 threat-sibling IPs out of 256 total addresses. This indicates the hosting facility is commonly associated with abusive activity, though the target IP itself shows no malicious signals.

---

## OBSERVATION HISTORY

• Total Observations: 26
• Recent Activity: Signals observed through June 2026
• Threat Persistence: 0 days (not persistently malicious)
• Ownership Changes: 0
• Campaign Correlation: None detected

Temporal Analysis: The IP has maintained consistent ownership and infrastructure classification with no observed shifts toward malicious activity. Recent signals indicate stable, low-risk operational behavior.

---

## NETWORK RELATIONSHIPS

• Relationship Count: 102
• Primary Association: OVH-CUST-281059682 (network)
• Type: Hosting infrastructure customer allocation
• BGP Prefix: 142.44.128.0/17

The IP is part of a large, consolidated customer allocation with consistent network classification.

---

## RECOMMENDED ACTIONS

Recommendation Level: Moderate

Rationale: While the IP shows no active threat indicators, the subnet's high abuse density (0.5742) and presence on 2 DNSBL lists warrant defensive blocking. The firewall-hardened state suggests the IP may be used for non-interactive purposes or as part of compromised infrastructure.

---

## ANALYST NOTES

1. Subnet Context: The 142.44.233.0/24 subnet is classified as "high_abuse" with 57.42% abuse density. Monitor other IPs in the block for correlation.

2. Ahrefs Association: Domain resolution to ahrefs.net indicates potential legitimate SEO tooling usage, though this cannot be verified without additional context.

3. Geolocation Caution: Do not rely on the claimed Beaucharnois, QC location due to RTT validation failure.

4. Operational Status: No open services detected. This may indicate legitimate server hardening or abuse mitigation.

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.