198.244.183.189📋 Copy

IP Intelligence Briefing: 198.244.183.189

*Generated via IPDebrief Analysis*

---

**1. Risk Profile**

• Overall Risk Score: Moderate (50/100)
• Threat Indicators: No direct malicious activity detected (no malware, phishing, or exploitation indicators).
• Network Classification: High abuse subnet (198.244.183.0/24) with 56.64% abuse density.
• Ownership: Owned by Ahrefs Pte Ltd (OVH ASN 16276), registered with ARIN.
• Geolocation: London, England, UK (plausible, but geolocation data incomplete).

---

**2. Network & Infrastructure**

• Hosting Role: Cloud compute infrastructure (OVH), likely used for proxy services (PTR hostname: `proxy-uk004-san189.ahrefs.net`).
• Subnet Analysis:

- Active Neighbors: 106 IPs in the 198.244.183.0/24 subnet.

- Threat Density: 145 of 256 IPs flagged as threats (56.64% abuse density).

- Inherited Risk: 22 points (likely from malicious neighbors).

• Routing: BGP prefix `198.244.128.0/17`, stable route with DNSSEC validation.

---

**3. Threat & Behavior**

• No Direct Threats: No DNS-based attacks, spam, or malicious campaigns linked to this IP.
• Subnet Trends: High abuse density suggests potential for lateral movement or compromised neighbors.
• Services: No open ports or TLS certificates detected.

---

**4. Recommendations**

• Monitor Subnet: Given the high abuse density, prioritize monitoring traffic to/from this subnet.
• Network Segmentation: Isolate critical assets from this subnet to mitigate potential lateral movement.
• Verify Ownership: Confirm Ahrefs Pte Ltd’s use case for this IP (proxy services may raise privacy/legality concerns).
• Check Domain Security: Investigate `ahrefs.net` for email security practices (no SPF/DKIM detected).

---

Next Steps: Correlate this IP with internal logs, monitor for unusual outbound traffic, and validate subnet-level risks.

*End of Briefing*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.