148.113.128.62📋 Copy

IP Intelligence Briefing: 148.113.128.62

Date: 2026-06-09

---

**1. Risk Profile**

• Risk Score: 25 (Low Risk)
• Provider Score: 0 (No provider-specific risk)
• Authority Score: 0 (No authoritative malicious indicators)
• Stability Score: 0 (Unstable network behavior detected)

Key Findings:

• The IP is registered to OVH-CUST-281059693 (Ahrefs Pte Ltd), a legitimate cloud hosting provider.
• Geolocation: Located in Canada (CA), but associated with Singapore (city field). Accuracy radius: 3,000 km.
• Network Role: Identified as a cloud-hosted infrastructure (OVH) with no signs of CDN, VPN, or residential traffic.
• Threat Indicators: No malicious activity detected (no blacklists, spam, or known attacker associations).

---

**2. Network Behavior**

• Open Ports/TLS: No open ports or TLS certificates detected.
• DNS Associations:

- Linked to proxy-ca014-san62.ahrefs.net (Ahrefs domain).

- No DNS-based threats or misconfigurations observed.

• Subnet Analysis:

- Subnet: 148.113.128.0/24

- Abuse Density: 45.45% (mixed risk, 115/253 IPs in subnet flagged as risky).

- Neighbor Risk: 80% of neighbors scored low risk; 20% medium risk.

---

**3. Observation History**

• Recent Activity (Last 30 Days):

- 18 observations recorded, including:

- Cloud hosting infrastructure (OVH) confirmed.

- DNS resolution for ahrefs.net (CAA records validated).

- Geolocation signal consistent with Canada (56.13°N, -106.35°W).

- No persistent threats or repeated malicious behavior detected.

---

**4. Relationships & Context**

• Network Relationships:

- Directly tied to OVH-CUST-281059693 (Ahrefs Pte Ltd).

- No connections to Tor, VPNs, or known malicious networks.

• Domain Associations:

- DNS records point to ahrefs.net, a legitimate domain with valid DNSSEC and CAA records.

---

**5. Recommendations**

• Monitor Subnet: While the IP itself is low risk, the subnet has a 45.45% abuse density. Monitor neighboring IPs for anomalies.
• Verify DNS: Confirm DNS resolution for proxy-ca014-san62.ahrefs.net aligns with expected behavior.
• No Immediate Action: No firewall rules or blocking required for this IP, but maintain visibility due to subnet-level risk.

---

Source: IPDebrief Threat Intelligence Platform

Note: This IP is associated with a legitimate cloud provider. No evidence of active exploitation or malicious campaigns detected.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.