198.244.183.46📋 Copy

IP Intelligence Briefing: 198.244.183.46

*Generated via IPDebrief tools: Profile, History, Relationships, Neighbors*

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership:

- AS: AS16276 (OVH)

- Organization: Ahrefs Pte Ltd (SEO services)

- Geolocation: London, England, UK

• Network Role:

- Hosting provider (OVH infrastructure)

- No public services (open ports, TLS, or HTTP detected)

• Threat Indicators:

- No malicious indicators, spam, or known attacker associations

- DNS: PTR record points to `proxy-uk004-san46.ahrefs.net`

---

**2. Observation History**

• 30-Day Trends:

- Stable risk profile with no significant changes

- Subnet abuse density: 0.5 (high risk for the /24 network)

- No spikes in DNS, geolocation, or threat signals

---

**3. Relationships**

• Network Associations:

- Linked to OVH network (AS16276)

- DNS: Resolves to `ahrefs.net` (legitimate domain)

• Subnet Context:

- Part of `198.244.183.46/24` with 100 sibling IPs

- 130 of 256 IPs in subnet flagged as high-risk

---

**4. Neighborhood Analysis**

• Subnet Risk:

- Abuse density: 50.78% (high_abuse classification)

- 85 active IPs in subnet, 130 marked as threats

• Inherited Risk:

- IP inherits 20% risk from subnet activity

- No direct malicious associations

---

**5. Recommendations**

• Monitor Subnet: High abuse density in the /24 network warrants closer scrutiny of traffic patterns.
• Verify DNS: Confirm legitimacy of `ahrefs.net` and associated proxies.
• Baseline Behavior: No immediate action required for the IP itself, but continuous monitoring is advised due to subnet risk.

Conclusion: The IP is part of a hosting provider’s network associated with a legitimate SEO firm. While no direct threats are detected, the subnet’s high abuse density suggests potential indirect risks. SOC teams should prioritize monitoring the subnet for lateral movements or anomalous activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.