198.244.168.70📋 Copy

IP Intelligence Briefing: 198.244.168.70

Date: 2026-06-15

---

**1. Risk Profile**

• Risk Score: Moderate (40/100)
• Provider: OVH (ASN 16276)
• Ownership: Ahrefs Pte Ltd (Dmytro)
• Geolocation: London, England, UK
• Network Role: CloudCompute Hosting (OVH)

---

**2. Threat Indicators**

• No Direct Malicious Activity: No malware, C2, or exploit indicators detected.
• Subnet Risk:

- Abuse Density: 59.38% (high_abuse classification)

- Inherited Risk: 23 (from subnet)

- Threat Siblings: 152/256 IPs in subnet flagged for abuse.

• DNS: Linked to `proxy-uk001-san70.ahrefs.net` (Ahrefs infrastructure).

---

**3. Observation History**

• Recent Trends:

- Subnet abuse density increased from 59.38% (June 9) to 76.95% (June 15).

- No persistent threats or malware observed.

• Network Behavior:

- Latency: 86–100ms (London, UK).

- Geolocation validated as plausible.

---

**4. Relationships**

• Key Associations:

- Hostname: `proxy-uk001-san70.ahrefs.net` (Ahrefs Pte Ltd).

- Network: OVH (ASN 16276) with 256 IPs in subnet.

• No Known Campaigns or Threat Feeds: No correlation to known malicious campaigns.

---

**5. Neighborhood Analysis**

• Subnet: `198.244.168.0/24`
• Risk Distribution:

- High Risk: 0 IPs

- Medium Risk: 93 IPs

- Low Risk: 7 IPs

• Neighbor IPs:

- 93% of siblings in the subnet have medium-low risk.

- No direct malicious neighbors linked to this IP.

---

**6. Recommendations**

• Monitor Subnet: Track changes in abuse density and new threat siblings.
• Verify DNS: Confirm `proxy-uk001-san70.ahrefs.net` is legitimate (Ahrefs infrastructure).
• Firewall Rules: Consider allowing traffic only from trusted networks if this IP is critical.

Conclusion: The IP is part of a cloud-hosted environment with no direct malicious activity. However, its subnet has a high abuse density, warranting closer monitoring for potential lateral movement or compromised neighbors.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.