198.244.183.147
## IP Intelligence Briefing: 198.244.183.147/32
Classification: Moderate Risk Hosting Infrastructure
Intel Summary:
IP address 198.244.183.147 is a hosted infrastructure endpoint operating under OVH provider infrastructure (ASN 16276). The IP resolves to proxy-uk004-san147.ahrefs.net, indicating association with Ahrefs Pte Ltd Dmytro organization. Current risk assessment scores 50 (Moderate Risk) with geolocation consistent with London, England.
Key Observations:
*Network Classification:* The IP operates as a hosting infrastructure endpoint with no actively open ports detected. DNS resolution confirms the ahrefs.net domain association. Control plane analysis reveals the IP belongs to BGP prefix 198.244.128.0/17 with non-stable routing characteristics.
*Abuse Context:* The IP resides within subnet 198.244.183.0/24, classified as high_abuse with 0.7773 abuse density. Of 256 total sibling IPs, 200 are active with 199 flagged as threat siblings. This indicates a high-risk hosting environment where the majority of neighbors demonstrate malicious activity patterns.
*Threat Indicators:* No active threat indicators present (isTorExit: false, isKnownAttacker: false, isSpamSource: false). However, the IP appears on 2 of 8 DNSBL lists. Historical data shows 22 observations with consistent high_abuse classification across the subnet.
Security Recommendations:
Firewall rules have been generated for blocking this IP address:
- iptables: `iptables -A INPUT -s 198.244.183.147 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 198.244.183.147 drop`
- Cloudflare WAF and AWS WAF block rules available for deployment
Operational Notes:
While the individual IP does not exhibit active attack indicators, the high-abuse neighborhood context warrants monitoring. The moderate risk score (50) combined with the subnet-level abuse density suggests this IP may be utilized for hosting services that could potentially be compromised or misused. Consider implementing rate limiting and connection monitoring for traffic from this subnet.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Ahrefs Pte Ltd Dmytro |
| ASN | AS16276 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | proxy-uk004-san147.ahrefs.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-uk004-san147.ahrefs.net |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 31% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 26% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-18 09:24:10 UTC |
| Last Seen | 2026-06-28 06:57:02 UTC |
| Profile Built | 2026-06-29 07:02:11 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 27 |
Full dossier details are available via our API.