176.31.139.11
IP Intelligence Briefing: 176.31.139.11
Date: 2026-06-14
---
**1. Core Profile**
- Risk Score: Moderate (40/100)
- Ownership: Registered to Ahrefs Pte Ltd (AS16276, OVH provider).
- Geolocation: France (Roubaix, Hauts-de-France region).
- Network Role: Hosting service (OVH infrastructure), no public services detected.
- Threat Indicators: No malicious activity observed; no blacklisted IPs or campaigns linked.
---
**2. Observation History**
- Recent Activity:
- DNS records resolved to `proxy-fr004-san11.ahrefs.net` (likely a proxy server).
- No signs of scanning, exploitation, or malware distribution.
- Risk Trends: Stable with no significant changes in threat signals.
---
**3. Network Relationships**
- Subnet: 176.31.139.0/24 (OVH-assigned).
- Neighbors:
- 31 IPs in subnet, with 31% abuse density (medium-risk siblings).
- Most IPs share similar risk scores (40–50), suggesting a shared hosting environment.
- Key Links:
- Connected to OVH_282114229 network (likely OVH's cloud infrastructure).
---
**4. Threat Context**
- No Malicious Indicators:
- No indicators of botnets, spam, or phishing.
- DNSSEC and CAA records are valid, with no DNSBL listings.
- Subnet Risk: Moderate abuse density in the subnet, but no direct ties to the IP.
---
**5. Recommendations**
- Monitor Subnet: Track activity in the 176.31.139.0/24 subnet for spikes in abuse density.
- Verify DNS: Confirm if the `proxy-fr004-san11.ahrefs.net` hostname is legitimate (Ahrefs is a known SEO tool, but verify proxy usage).
- No Immediate Action: No firewall rules or blocking required for this IP, but maintain visibility.
Conclusion: This IP is part of a legitimate hosting infrastructure with no current malicious activity. However, the subnet’s moderate abuse density warrants ongoing monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ahrefs Pte Ltd Dmytro |
| ASN | AS16276 |
| Network Name | — |
| CIDR Block | — |
| RIR | RIPE |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | proxy-fr004-san11.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-fr004-san11.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 20% | 2 | 3 |
| ownership | 24% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 31% | 2 | 3 |
| Overall | 25% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-08 17:17:43 UTC |
| Last Seen | 2026-06-27 13:41:10 UTC |
| Profile Built | 2026-06-28 07:47:39 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 29 |
Full dossier details are available via our API.