148.113.130.104📋 Copy

IP Intelligence Briefing: 148.113.130.104

Date: 2026-06-14

---

**1. Core Profile**

• Risk Score: 25 (Low Risk)
• Owner: Ahrefs Pte Ltd (OVH ASN 16276)
• Geolocation: Singapore (CA), but geoPlausible false (RTT anomalies suggest potential spoofing or misconfigured DNS).
• Network Role: Cloud infrastructure (OVH-hosted, no public services detected).
• Threat Indicators: No malicious activity, spam, or known attacker associations.

---

**2. Historical Observations**

• Risk Trends: Minimal risk over 21 observations (last 30 days).
• Key Signals:

- DNSSEC and CAA validation active.

- Subnet abuse density (148.113.130.0/24): 36.22% (mixed usage, 92 threat siblings).

- No persistent malicious activity or campaign linkage.

---

**3. Network Relationships**

• Subnet: 148.113.130.0/24 (OVH-CUST-281059688).
• Neighbors: 100 IPs in subnet (54 low-risk, 46 medium-risk).
• Key Links:

- DNS resolver: `proxy-ca009-san104.ahrefs.net` (Ahrefs domain).

- No direct links to C2 servers, CDN nodes, or Tor.

---

**4. Threat Context**

• No Malicious Activity: No DNS-based attacks, TLS anomalies, or open ports detected.
• Subnet Risks: Moderate abuse density (36.22%) with 92 threat siblings. Monitor for lateral movement or compromised neighbors.
• Geolocation Discrepancy: High RTT (27ms) vs. 6,082km distance suggests potential spoofing or misconfigured routing.

---

**5. Recommendations**

• Monitor Subnet: Track changes in abuse density and threat siblings.
• Verify DNS: Confirm Ahrefs’ ownership of `proxy-ca009-san104.ahrefs.net` to rule out spoofing.
• Allowlist Legitimate Traffic: Ahrefs’ infrastructure appears benign, but enforce strict egress rules.
• Check for Anomalies: Investigate RTT discrepancies if geolocation becomes critical for security policies.

---

Conclusion: 148.113.130.104 is low-risk cloud infrastructure owned by Ahrefs. While no direct threats are detected, the subnet’s moderate abuse density warrants ongoing monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.