148.113.130.80📋 Copy

IP Intelligence Briefing: 148.113.130.80

*Generated via IPDebrief tools*

---

**Risk Profile**

• Overall Risk: Moderate (Risk Score: 40)
• Provider: OVH (ASN 16276)
• Organization: Ahrefs Pte Ltd (OVH-CUST-281059688)
• Network Role: Cloud compute infrastructure (no open services, firewalled)
• Geolocation: Singapore (CA), but geoPlausible flag is false (RTT anomaly detected).

---

**Threat Indicators**

• No direct malicious activity: No DNS abuse, spam, or known attacker associations.
• Subnet Risk: High abuse density (0.5117) in 148.113.130.0/24.
• Neighbor Analysis: 131 of 256 IPs in the subnet are flagged as threats.

---

**Network Relationships**

• Linked to OVH-CUST-281059688 (same network).
• DNS: Resolves to `proxy-ca009-san80.ahrefs.net` (Ahrefs domain).
• No TLS certificates or active services detected.

---

**Observation History**

• Stability: Unstable routing (routeChanges30d: 0, route stability: false).
• Risk Trend: Moderate risk score (40) with no significant changes in threat signals.

---

**Neighbor Subnet Analysis**

• Subnet: 148.113.130.0/24
• Abuse Density: 51.17% (high abuse classification).
• Active Siblings: 162 IPs (131 flagged as threats).
• Inherited Risk: 20 (contributing to moderate overall risk).

---

**SOC Actionable Insights**

1. Monitor Subnet: High abuse density in 148.113.130.0/24 suggests potential for lateral movement or compromised hosts.

2. Verify Geolocation: Investigate Singapore IP with false geoPlausible flag (RTT discrepancy may indicate spoofing).

3. Network Segmentation: Consider isolating this subnet due to high-risk neighbors, even if the IP itself is benign.

4. Check Ahrefs Context: Confirm if the cloud instance is part of legitimate Ahrefs infrastructure or a compromised asset.

---

*End of Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.