198.244.226.185📋 Copy

IP Intelligence Briefing: 198.244.226.185

Date: 2026-06-09

---

**1. Core Profile**

• Risk Score: Low (25/100) | Provider: OVH | Organization: Ahrefs Pte Ltd
• Geolocation: London, England, GB | ASN: AS16276
• Network Role: CloudCompute (OVH) | Hosting: Yes | Subnet: 198.244.226.0/24

---

**2. Threat Indicators**

• Malicious Activity: None detected (no indicators, blacklists, or campaigns).
• DNS: Resolves to `proxy-uk002-san185.ahrefs.net` (Ahrefs domain).
• DNSBL: Listed in 1 DNSBL (low severity, likely false positive).
• BGP: Stable route (no recent changes).

---

**3. Observation History (Last 30 Days)**

• DNS: Consistent resolution to Ahrefs domain.
• Geolocation: Validated as London, GB (473km from probe, 88ms RTT).
• Network: Subnet abuse density: 46% (mixed benign/malicious activity).

---

**4. Relationships & Neighborhood**

• Linked Entities:

- Ahrefs Pte Ltd (organization)

- `proxy-uk002-san185.ahrefs.net` (hostname)

• Neighboring IPs:

- 100 IPs in 198.244.226.0/24 subnet.

- Abuse Density: 46% (65 medium-risk, 35 low-risk neighbors).

- Top Risks: 65 IPs with medium risk (e.g., potential spam or scanning activity).

---

**5. Actionable Insights**

• No Immediate Threat: IP is associated with a legitimate cloud provider (OVH) and Ahrefs, a known SEO tool.
• Monitor DNSBL: Investigate the single DNSBL listing to confirm false positive or potential misconfiguration.
• Subnet Monitoring: Track neighboring IPs for unusual activity, as the subnet contains both benign and risky hosts.
• Network Segmentation: Consider isolating this IP if it hosts sensitive services, given the mixed subnet environment.

---

Conclusion: This IP is likely a legitimate cloud server used by Ahrefs. While no direct threats are detected, the subnet’s mixed risk profile warrants ongoing monitoring for anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.