148.113.128.140📋 Copy

# IP Intelligence Briefing: 148.113.128.140/32

Classification: Moderate Risk Cloud Infrastructure

Date: 2026-06-18

Source: IPDebrief Intelligence Platform

---

## Executive Summary

IP 148.113.128.140 is a cloud infrastructure endpoint hosted on OVH network (ASN 16276) under organization "Dmytro, Ahrefs Pte Ltd" in the 148.113.128.0/24 block. The IP maintains a risk score of 40 (Moderate Risk) with minimal operator classification. While the parent subnet exhibits high abuse density, this specific IP demonstrates stable, non-malicious signal characteristics with no active threat indicators.

---

## Network Ownership & Infrastructure

• ASN: 16276 (OVH)
• Organization: Dmytro, Ahrefs Pte Ltd
• Network Block: 148.113.128.0/24
• Infrastructure Type: Cloud Compute (OVH)
• Service Purpose: Firewalled / No Services
• Cloud Status: Confirmed cloud environment

---

## Geolocation Analysis

• Reported Location: Singapore
• Country Code: CA
• Accuracy Radius: 3,000 km
• GeoValidation: GeoPlausible: false (RTT violation detected)
• Minimum Possible RTT: 121.6ms (actual: 28ms for 6082km distance)
• Probe Count: 5

*Note: Geolocation data shows RTT anomaly indicating potential data inconsistency in geo-records.*

---

## Threat Indicators Assessment

DNSBL Status: Listed on 1 of 8 total lists

Operator Score: 0.2174 (Minimal)

---

## Network Neighborhood Analysis

Subnet: 148.113.128.0/24

Abuse Density: 0.6797 (High Abuse)

Classification: High Abuse

Risk Distribution (Sampled Neighbors):

• High: 0%
• Medium: 97%
• Low: 3%

---

## DNS & Service Analysis

PTR Hostnames: proxy-ca014-san140.ahrefs.net

Domain: ahrefs.net

Forward Resolution: Confirmed (1 hostname)

Open Ports: None detected

TLS Certificate: Not present

HTTP Services: Inactive

Email Authentication:

• SPF: Not configured
• DMARC: Not configured
• TXT Records: 0

---

## Signal Observation History

Total Observations: 24

Analysis Period: 2026-06-17 to 2026-06-18

Key Historical Trends:

• Abuse density fluctuations: 0.6484 → 0.6797 (increasing)
• Inherited risk: 25 → 27 (slight increase)
• Operator score: Consistent at 0.2174
• Threat observation count: 1
• Persistently malicious: False

---

## Relationship Graph

Total Relationships: 51

• All relationships map to "Same Network" (OVH-CUST-281059693)
• No external entity correlations identified

---

## Recommended Actions

Firewall/Security Posture:

• No immediate blocking recommended
• Monitor for service activation (currently firewalled/no services)
• Consider monitoring DNSBL re-listing patterns
• Evaluate subnet-level reputation for broader traffic assessment

SOC Analyst Notes:

• IP is part of high-abuse subnet but maintains individual low-risk profile
• Cloud infrastructure with no open services detected
• Minimal operator score suggests low threat likelihood
• Monitor for service activation or DNSBL re-listing events

---

Intel Classification: Defensive Monitoring

Threat Level: Low-Moderate

Action Required: Monitor

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.