148.113.128.103📋 Copy

IP Intelligence Briefing: 148.113.128.103

*Generated using IPDebrief tools: Profile, History, Relationships, Neighbors*

---

**1. Core Profile**

• Risk Score: 25/100 (Low Risk)
• Ownership: Owned by OVH (ASN 16276), registered to Ahrefs Pte Ltd.
• Geolocation:

- Country: Canada (CA)

- City: Singapore (likely inferred from domain association).

- Latitude/Longitude: Unavailable.

• Network Role:

- CloudCompute infrastructure (OVH-hosted).

- No open ports or TLS services detected.

• Threat Indicators:

- No malware, spam, or known attacker activity.

- Not listed in DNSBLs or threat feeds.

---

**2. Observation History**

• Recent Activity:

- Observed over 19 days (June 6–May 31, 2026).

- Subnet abuse density fluctuated between 0.28–0.42 (moderate risk).

- No persistent malicious behavior or campaign ties.

• Stability:

- Low stability score (0/100), indicating potential transient or misconfigured infrastructure.

---

**3. Relationships**

• DNS Associations:

- Linked to proxy-ca014-san103.ahrefs.net (Ahrefs domain).

- No email authentication (SPF/DKIM) detected.

• Network Connections:

- Part of OVH-CUST-281059693 subnet (148.113.128.0/24).

- No direct ties to Tor, CDN, or proxy services.

---

**4. Subnet Neighborhood**

• Subnet: 148.113.128.0/24 (256 IPs).
• Risk Distribution:

- 77 IPs: Low risk (score ≤25).

- 23 IPs: Medium risk (score 26–50).

- 0 IPs: High risk.

• Abuse Density: 0.28 (moderate, but lower than average).
• Notable Neighbors:

- IPs with risk scores ≥50 (potential misconfigurations or shared hosting risks).

---

**5. Actionable Insights**

• No Immediate Threat: The IP itself shows no malicious activity.
• Monitor Subnet: Track neighbors with medium risk scores for potential lateral movement or shared hosting compromises.
• Verify Geolocation: Discrepancy between "Canada" and "Singapore" in geolocation data may indicate misconfigured DNS or routing anomalies.
• Validate Hosting Provider: Ensure OVH’s security practices align with your organizational policies, given the cloud-compute role.

Recommendation: Low-priority for active blocking. Use passive monitoring for subnet-level anomalies.

---

*Generated by IPDebrief. Data last updated: June 6, 2026.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.