198.244.226.23📋 Copy

IP Intelligence Briefing: 198.244.226.23

Date: 2026-06-15

---

**1. Risk Profile**

• Risk Score: 40 (Moderate Risk)
• Provider: OVH (ASN 16276)
• Organization: Ahrefs Pte Ltd (registered with ARIN)
• Geolocation: London, England, UK (inferred via DNS and routing data)
• Network Role: Cloud compute infrastructure (OVH), no exposed services, firewalled.

---

**2. Threat Indicators**

• Malicious Activity: No indicators of spam, attacks, or known malicious campaigns.
• Subnet Abuse:

- Subnet 198.244.226.23/24 classified as high_abuse with 51.95% abuse density.

- 84/100 neighbors in the subnet have medium/high risk scores (84 medium, 16 low).

• DNS Associations: Linked to proxy-uk002-san23.ahrefs.net (Ahrefs domain).

---

**3. Observation History**

• Recent Activity:

- Observed between 2026-06-08 and 2026-06-15.

- Risk scores fluctuated between 20–40, with minimal confidence in some signals.

- No persistent malicious trends detected.

---

**4. Network Relationships**

• Same Network: Linked to OVH network OVH_282347338 (high abuse classification).
• DNS: Direct association with proxy-uk002-san23.ahrefs.net (Ahrefs).
• Subnet Neighbors: 100 IPs in the /24 subnet; 84% show medium risk, 16% low.

---

**5. Recommendations**

• Monitor Subnet: The /24 subnet has high abuse density; investigate neighbors for anomalous behavior.
• Verify DNS: Confirm Ahrefs' infrastructure is secure, as the DNS hostname is linked to a legitimate entity.
• Network Segmentation: Ensure isolation between this cloud compute instance and internal networks.
• Long-Term Watch: Track changes in the subnet’s abuse density and OVH network activity.

Note: The IP itself appears benign but resides in a network with mixed risk factors. Prioritize monitoring the subnet and associated DNS assets.

---

*Generated via IPDebrief threat intelligence tools.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.