198.244.242.148📋 Copy

IP Intelligence Briefing: 198.244.242.148

Date: 2026-06-06

---

**1. IP Profile**

• Risk Score: 25 (Low Risk)
• Ownership:

- Organization: Ahrefs Pte Ltd Dmytro

- ASN: 16276 (OVH)

- Geolocation: London, England, GB

• Network Role:

- Cloud Compute instance (OVH)

- No open ports; no TLS/HTTP services detected

• Threat Indicators:

- No malicious activity, spam, or known attacker associations

---

**2. Observation History**

• Recent Signals:

- DNS resolution linked to `proxy-uk007-san148.ahrefs.net`

- DNSSEC and CAA validation active

- Low abuse density (0.43) in the /24 subnet

• Temporal Trends:

- No persistent malicious behavior detected

- Stability score: 0 (unstable network configuration?)

---

**3. Relationships**

• DNS Associations:

- Resolves to `proxy-uk007-san148.ahrefs.net` (Ahrefs infrastructure)

• Network Links:

- Subnet: `198.244.242.148/24` (OVH-managed)

- Shared ASN (16276) with 256 IPs (118 active, 111 flagged as high/medium risk)

---

**4. Neighborhood Analysis**

• Subnet Abuse Density: 43.36% (moderate risk)
• Neighbor Risks:

- 23 IPs with medium risk (avg. 50)

- 77 IPs with low risk (avg. 25)

• Notable Neighbors:

- `198.244.242.0` (risk: 50), `198.244.242.1` (risk: 25), etc.

---

**5. Recommendations**

• Monitoring: Track subnet activity due to moderate abuse density.
• Firewall: Consider allowing traffic only from trusted sources, given the cloud-hosted nature.
• Validation: Verify DNS records for `proxy-uk007-san148.ahrefs.net` for potential spoofing risks.

Conclusion: The IP is associated with a legitimate cloud provider (OVH) and Ahrefs, showing no direct malicious indicators. However, the subnet contains a mix of high/medium-risk IPs, warranting closer monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.