198.244.183.77📋 Copy

IP Intelligence Briefing: 198.244.183.77

Date: 2026-06-11

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership:

- ASN: 16276

- Organization: Ahrefs Pte Ltd Dmytro

- ISP: OVH (CloudCompute Hosting)

• Geolocation:

- Country: United Kingdom (GB)

- Region: England

- City: London

- Accuracy Radius: ~750 km (plausible via multi-signal inference)

• Network Role:

- Type: Cloud Compute Hosting

- Subnet: 198.244.183.77/24

- Subnet Abuse Density: 69.53% (High Abuse)

---

**2. Threat Indicators**

• No Direct Malicious Activity:

- No indicators of spam, attacker, or Tor exit node.

- No detected malware campaigns, phishing, or DNS-based threats.

• DNS Associations:

- Linked to proxy-uk004-san77.ahrefs.net (PTR record).

- Domain ahrefs.net shows partial DNSSEC validation and CAA records but lacks SPF/DMArc.

---

**3. Observation History**

• Recent Activity (Last 24h):

- Stable geolocation and network signals.

- Subnet abuse density remains consistent at 69.53%.

- No significant changes in threat signals or network behavior.

---

**4. Network Relationships**

• Key Associations:

- OVH Network (ASN 16276): Part of OVH’s cloud infrastructure.

- DNS: Strong ties to ahrefs.net (proxy hostname).

- Subnet Neighbors: 100 IPs in 198.244.183.0/24, with 69.53% classified as high abuse.

---

**5. Neighborhood Analysis**

• Subnet Overview:

- Total IPs: 256 (198.244.183.0/24).

- Active IPs: 139 (54.3%).

- Threat IPs: 178 (69.53% of subnet).

- Inherited Risk: 27 (moderate).

• Neighbor Risk Distribution:

- High Risk: 0 IPs.

- Medium Risk: 100 IPs.

- Low Risk: 0 IPs.

---

**6. Recommendations**

• Monitor Subnet: The high abuse density in the subnet (198.244.183.0/24) warrants closer scrutiny.
• Check DNSSEC & Email Security: Ensure ahrefs.net has full SPF/DMArc implementation for email security.
• Network Segmentation: Consider isolating high-risk subnets to mitigate potential lateral movement.
• Baseline Behavior: Establish a baseline for the IP’s traffic patterns to detect anomalies.

---

Conclusion:

This IP is part of a high-abuse subnet associated with Ahrefs’ cloud hosting infrastructure. While no direct malicious activity is detected, the surrounding network’s risk profile suggests vigilance. SOC teams should prioritize monitoring the subnet and ensuring DNS/email security for linked domains.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.