198.244.168.186📋 Copy

IP Intelligence Briefing: 198.244.168.186

Date: June 1, 2026

---

**1. Risk Profile**

• Overall Risk Score: 25 (Low Risk)
• Provider: OVH (cloud infrastructure)
• Organization: Ahrefs Pte Ltd (legitimate SEO tools provider)
• Geolocation: London, England, UK (confirmed via DNS and BGP data)
• Network Role: Cloud compute instance (no open services detected)

---

**2. Threat Indicators**

• No malicious activity detected: No indicators of compromise (IOCs), spam, or known attacker campaigns.
• DNS Associations: Linked to `proxy-uk001-san186.ahrefs.net` (Ahrefs infrastructure).
• BGP Data: Subnet `198.244.168.186/24` shows mixed abuse density (48% abuse risk).

---

**3. Observation History**

• Recent Scans:

- No open ports or active services detected (port scan results empty).

- DNS resolution confirmed for `ahrefs.net` (CAA records present).

• Geolocation Consistency: Multiple probes confirm London, UK (RTT: 86–90ms).

---

**4. Network Relationships**

• Subnet: `198.244.168.186/24` (256 total IPs, 108 active).
• Threat Neighbors: 123 IPs in subnet flagged as risky (abuse density: 48%).
• Provider Links: OVH ASN 16276 (no suspicious routing anomalies).

---

**5. Recommendations**

• Monitor Subnet: The `/24` subnet has a moderate abuse density; investigate neighboring IPs for potential lateral movement.
• Allow Legitimate Traffic: Ahrefs infrastructure is benign; no blocking required.
• Maintain Baseline: No changes in risk scores or threat indicators since last observation.

Conclusion: This IP is part of a legitimate cloud infrastructure with no immediate threats. Focus on monitoring the broader subnet for emerging risks.

---

*Generated via IPDebrief threat intelligence analysis.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.