198.244.183.143📋 Copy

# IP Intelligence Briefing: 198.244.183.143/32

## Executive Summary

Risk Classification: Low Risk (Score: 25/100)

IP 198.244.183.143 is a cloud infrastructure endpoint associated with Ahrefs Pte Ltd, hosted on OVH network infrastructure. The IP shows no active threat indicators and maintains low-risk characteristics.

## Infrastructure Profile

• Ownership: Ahrefs Pte Ltd Dmytro (ASN: 16276)
• Provider: OVH (CloudCompute infrastructure)
• Geolocation: London, England, GB (GeoConsensus: Yes, GeoPlausible: Yes)
• Network Role: Cloud-hosted, hosting provider classification
• DNS: Forward resolves to proxy-uk004-san143.ahrefs.net
• Services: No open ports detected (firewalled configuration)
• TLS/HTTP: No active services, no certificates, no HTTP headers detected

## Threat Assessment

• Reputation Sources: None identified
• Blacklist Status: 0 blacklists, 1 DNSBL listing (minimal impact)
• Known Campaigns: None
• Threat Indicators: None (not known attacker, not Tor exit, not spam source)
• Abuse Confidence Score: Not applicable
• Campaign Likelihood: None

## Control Plane Analysis

• BGP Prefix: 198.244.128.0/17
• Origin ASN: 16276
• RPKI State: Not available
• IRR Consistency: Not available
• Route Stability: Not stable (routeChanges30d: 0 but isRouteStable: false)
• DNSSEC: Valid
• CAA Records: Present
• Operator Score: 0.2174 (Minimal)

## Temporal Analysis

• Observation Count: 1 threat observation recorded
• Ownership Changes: 0 changes
• Threat Persistence: 0 days
• Persistently Malicious: No

## Neighborhood Analysis (198.244.183.0/24)

• Subnet Classification: Mixed
• Abuse Density: 42.19%
• Total Siblings: 256
• Active Siblings: 213
• Threat Siblings: 108
• Risk Distribution: 0 High, 76 Medium, 24 Low

## Historical Observations (23 total)

Recent signals indicate:

• Domain resolution to ahrefs.net (confidence: 0.80)
• CAA records present
• Cloud infrastructure confirmed (OVH) (confidence: 0.90)
• GB geolocation inferred (confidence: 0.28)
• Operator score: Minimal (confidence: 0.30)

## Related Entities

• Network: OVH_282347340 (63 relationship entries)
• Primary Hostname: proxy-uk004-san143.ahrefs.net
• No certificate or organization relationships identified

## Recommended Actions

• No immediate blocking required – IP maintains low-risk profile
• Monitoring: Continue standard monitoring given 42.19% neighborhood abuse density
• Firewall Rules: No specific recommendations generated
• WAF Configuration: No specific rules required based on current risk profile

## Intelligence Context

This IP represents a legitimate cloud-hosted endpoint for Ahrefs, a SEO analytics platform. The infrastructure is properly registered under ARIN with OVH as the cloud provider. No malicious activity has been observed despite moderate neighborhood abuse density. The IP appears to be a standard cloud infrastructure component with no anomalous behavior detected.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.