198.244.168.78
IP Intelligence Briefing: 198.244.168.78
*Last Updated: 2026-06-14*
1. Core Profile
- Reputation: Moderate Risk (Risk Score: 40)
- Ownership: Owned by Ahrefs Pte Ltd (AS16276), registered to a UK entity.
- Geolocation: London, England, GB (high geolocation plausibility).
- Network Role: CloudCompute infrastructure (OVH provider), no public services detected.
- Threat Indicators: No malicious activity, no blacklists, no known attacker campaigns.
2. Observation History
- Recent Activity:
- DNS resolution to `proxy-uk001-san78.ahrefs.net` (ahrefs.net domain).
- BGP analysis shows stable routing with OVH (AS16276).
- Subnet abuse density: 0.52 (high_abuse classification) over 198.244.168.0/24.
- Historical Trends: No persistent malicious behavior detected.
3. Relationships
- Network Connections:
- Linked to OVH network `OVH_282347337` (282347337).
- No direct ties to Tor, CDN, orVPN infrastructure.
- Domain Affiliation: Resolves to ahrefs.net, a legitimate domain with SPF/DKIM misconfiguration.
4. Neighborhood Analysis
- Subnet: 198.244.168.0/24 (256 IPs).
- Risk Distribution:
- 76 IPs flagged as medium risk (avg. score 40), 24 low risk.
- 134 IPs in subnet show threat-related activity.
- Abuse Density: 52% of sibling IPs have abuse indicators.
5. Actionable Insights
- SOC Recommendations:
- Monitor traffic to/from this subnet for anomalies, given the high abuse density.
- Investigate ahrefs.net’s DNS misconfiguration (no SPF/DKIM).
- Block or restrict access to this IP if it’s not part of your cloud infrastructure.
- Context: Likely benign cloud infrastructure, but subnet’s abuse profile warrants closer scrutiny.
6. Summary
The IP is part of Ahrefs’ cloud infrastructure, with no direct malicious indicators. However, its subnet exhibits elevated abuse density, suggesting potential for lateral movement or compromised hosts. Prioritize monitoring and ensure network segmentation to mitigate risks.
---
*Data sourced from IPDebrief intelligence tools.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ahrefs Pte Ltd Dmytro |
| ASN | AS16276 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | proxy-uk001-san78.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-uk001-san78.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 4 |
| routing | 12% | 2 | 2 |
| services | 17% | 2 | 3 |
| ownership | 20% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 23% | 11 | 18 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:04:06 UTC |
| Last Seen | 2026-06-27 02:38:23 UTC |
| Profile Built | 2026-06-27 20:44:54 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 32 |
Full dossier details are available via our API.