142.44.233.190
# INTELLIGENCE BRIEFING: 142.44.233.190
Classification: LOW RISK (Score: 30/100) | Status: Firewalled / No Services
---
## EXECUTIVE SUMMARY
IP 142.44.233.190 is a residential proxy endpoint hosted on OVH infrastructure in Quebec, Canada. The IP resolves to a hostname associated with Ahrefs (proxy-ca003-san190.ahrefs.net) and exhibits moderate operator-level risk characteristics. While the individual IP shows no active threat indicators, it resides within a high-abuse density subnet, warranting monitoring.
---
## NETWORK OWNERSHIP & INFRASTRUCTURE
| Attribute | Value |
|---|---|
| **ASN** | 16276 (OVH SAS) |
| **Organization** | Dmytro, Ahrefs Pte Ltd |
| **CIDR Block** | 142.44.233.0/24 |
| **Geolocation** | Beauharnois, Quebec, Canada |
| **Infrastructure Type** | CloudCompute (OVH) |
| **Network Role** | Cloud Provider / Hosting |
The IP is allocated to OVH customer netblock OVH-CUST-281059682 and operates within the broader 142.44.128.0/17 BGP prefix. Route stability is confirmed with RPKI validation status "valid."
---
## THREAT INTELLIGENCE
| Indicator | Status |
|---|---|
| **Risk Score** | 30 (Low Risk) |
| **Abuse Confidence** | Not Scored |
| **Blacklist Count** | 0 |
| **Known Campaigns** | None |
| **Tor Exit Node** | False |
| **Known Attacker** | False |
| **Spam Source** | False |
| **DNSBL Listed** | 1 of 8 lists |
No active threat indicators detected. The IP does not appear in any known attacker feeds or spam source databases.
---
## DNS & SERVICE ANALYSIS
| Attribute | Value |
|---|---|
| **PTR Hostname** | proxy-ca003-san190.ahrefs.net |
| **Forward Resolution** | proxy-ca003-san190.ahrefs.net |
| **Associated Domain** | ahrefs.net |
| **Open Ports** | None detected |
| **TLS Certificates** | None |
| **HTTP Banner** | None |
The IP resolves to an Ahrefs proxy hostname, suggesting legitimate use as a proxy service. No active services or open ports were detected during probing.
---
## NEIGHBORHOOD CONTEXT
Subnet: 142.44.233.0/24
| Metric | Value |
|---|---|
| **Abuse Density** | 0.75 (High) |
| **Total Siblings** | 256 IPs |
| **Active Siblings** | 206 IPs |
| **Threat Siblings** | 192 IPs (75%) |
| **Inherited Risk** | 30 |
The /24 subnet exhibits elevated abuse density (0.75), with 192 of 256 total IPs classified as threats. This contextual factor suggests the subnet may be utilized for legitimate proxy services rather than malicious activity, though continued monitoring is recommended.
---
## OBSERVATION HISTORY
Total Observations: 28
Recent Signals (2026-06-17):
- Subnet abuse density: 0.75 (High Abuse)
- Operator Score: 0.75 (Moderate)
- Geolocation: Canada, Quebec (Confidence: 0.35)
- Proxy Classification: VPN/Proxy (Confidence: 0.85)
Historical data indicates consistent classification as a proxy/VPN endpoint with stable geolocation reporting. No significant risk escalation observed.
---
## RELATIONSHIP GRAPH
Network Associations: 49 relationships identified
Primary network relationship: OVH-CUST-281059682 (Same Network)
No significant external entity relationships detected beyond infrastructure-level network associations.
---
## RECOMMENDED ACTIONS
Based on the risk profile (Score: 30), the following actions are recommended:
1. Firewall Policy: Allow traffic if legitimate proxy service is required; otherwise, monitor but no blocking required
2. Monitoring: Continue observing subnet-level activity due to high abuse density context
3. Threat Hunting: No immediate threat indicators detected; no blocking actions warranted
4. DNSBL Review: Note single DNSBL listing; investigate if blocking is required for specific use case
---
Report Generated: Intelligence Analysis | Source: IPDebrief | Confidence: Moderate
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Dmytro, Ahrefs Pte Ltd |
| ASN | AS16276 |
| Network Name | OVH-CUST-281059682 |
| CIDR Block | 142.44.233.0/24 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | proxy-ca003-san190.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-ca003-san190.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 2 — Moderate operator sophistication with routing hygiene |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 4 |
| routing | 22% | 3 | 4 |
| services | 12% | 2 | 2 |
| ownership | 22% | 3 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 34% | 2 | 3 |
| Overall | 24% | 13 | 19 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:03:43 UTC |
| Last Seen | 2026-06-26 23:18:02 UTC |
| Profile Built | 2026-06-27 19:31:25 UTC |
| Data Freshness | Live |
| Signal Types | 28 |
| Total Observations | 35 |
Full dossier details are available via our API.