IP Intelligence Briefing: 148.113.130.151
Date: 2026-06-10
Risk Profile:
- Overall Risk: Low (Risk Score: 25/100)
- Provider: OVH (ASN 16276)
- Organization: Dmytro, Ahrefs Pte Ltd
- Geolocation: Singapore (CA), no precise coordinates
- Threat Indicators: No malicious activity, no blacklisted domains, no DNS-based threats
Network Context:
- Role: Cloud compute instance (OVH-hosted, no residential/mobile traffic)
- Subnet: 148.113.130.0/24
- Subnet Abuse Density: 28.57% (112 active IPs, 72 flagged as high-risk)
- Neighbors: 100 IPs in subnet; 21 medium-risk, 78 low-risk, 0 high-risk
Key Associations:
- DNS: Linked to `proxy-ca009-san151.ahrefs.net` (Ahrefs domain)
- Certificates: No TLS/SSL certificates detected
- Services: No open ports or HTTP services observed
Observation History:
- Recent Activity:
- DNS resolution for `proxy-ca009-san151.ahrefs.net` (2026-06-10)
- Subnet route stability flagged (2026-06-01)
- No persistent threat signals or campaign correlations
Recommendations:
1. Monitor Subnet: High abuse density in 148.113.130.0/24; prioritize scanning neighboring IPs.
2. Verify DNS: Confirm Ahrefsβ use of `proxy-ca009-san151.ahrefs.net` for legitimate traffic.
3. Baseline Behavior: No immediate action required for 148.113.130.151, but track subnet changes.
Conclusion:
The IP is associated with a legitimate cloud provider (OVH) and appears to host Ahrefs infrastructure. While no direct threats are detected, the subnetβs elevated abuse density warrants closer scrutiny. No firewall rules or blocking actions recommended at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Dmytro, Ahrefs Pte Ltd |
| ASN | AS16276 |
| Network Name | OVH-CUST-281059688 |
| CIDR Block | 148.113.130.0/24 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | β |
π DNS Intelligence
| PTR | proxy-ca009-san151.ahrefs.net |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-ca009-san151.ahrefs.net |
π DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 32% | 1 | 3 |
| geolocation | 25% | 2 | 2 |
| Overall | 23% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-23 12:22:04 UTC |
| Last Seen | 2026-06-28 21:04:56 UTC |
| Profile Built | 2026-06-29 03:07:05 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.