198.244.168.221
IP INTELLIGENCE BRIEFING: 198.244.168.221/32
OVERVIEW
IP 198.244.168.221 was assessed as Moderate Risk with a risk score of 40. The address is owned by Ahrefs Pte Ltd Dmytro under ASN 16276 (OVH) and geolocated to London, England. The infrastructure is classified as cloud computing hosting with no active services or open ports.
OWNERSHIP AND INFRASTRUCTURE
The IP resolved to the ahrefs.net domain with PTR hostname proxy-uk001-san221.ahrefs.net. Control plane analysis revealed BGP prefix 198.244.128.0/17 with routing stability flagged as false. The operator score was recorded at 0.2174 (Minimal). DNSSEC validation was confirmed valid with CAA records present.
THREAT INDICATORS
Threat indicators returned empty with zero blacklist counts across 8 DNSBL lists. The IP is not classified as a Tor exit node, known attacker, or spam source. No active campaigns were identified. Email authentication checks showed no SPF or DMARC records configured.
NETWORK CONTEXT
The /24 subnet (198.244.168.0/24) was classified as high abuse with an abuse density of 0.6602. Of 256 total siblings, 164 were active and 169 were flagged as threats. The subnet risk score was 26. Neighbor analysis showed a risk distribution of 73 medium-risk and 27 low-risk IPs, with no high-risk neighbors identified.
OBSERVATION HISTORY
Signal observation history contained 23 total observations. Recent data from late June 2026 showed operator scores between 0.087 and 0.2174. Signal types included CAA, DNSSEC, FCRdns, routing, services, ownership, reputation, and geolocation assessments. No persistent malicious activity was observed.
RELATIONSHIP GRAPH
The relationship graph contained 48 entries, predominantly same-network relationships targeting OVH_282347337. No external hostname, organization, or certificate relationships were identified.
RECOMMENDED ACTIONS
Based on the moderate risk profile and cloud hosting classification, standard monitoring and logging is recommended. The absence of open ports and threat indicators suggests the IP serves legitimate infrastructure purposes within the OVH cloud environment.
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ahrefs Pte Ltd Dmytro |
| ASN | AS16276 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | proxy-uk001-san221.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-uk001-san221.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 20% | 2 | 3 |
| reputation | 21% | 1 | 2 |
| geolocation | 31% | 2 | 3 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-14 13:24:21 UTC |
| Last Seen | 2026-06-28 00:52:01 UTC |
| Profile Built | 2026-06-29 00:56:54 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 26 |
Full dossier details are available via our API.