198.244.183.184📋 Copy

# IP INTELLIGENCE BRIEFING: 198.244.183.184

## Executive Summary

IP address 198.244.183.184 is a moderate-risk (risk score: 50) cloud compute endpoint associated with OVH infrastructure in London, England. The IP belongs to an abuse-heavy subnet with 80.08% abuse density and is linked to the legitimate domain ahrefs.net. Current posture indicates firewalled service with no active ports exposed.

## Ownership & Geolocation

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276
• Country/Region: GB, England
• City: London
• Infrastructure: OVH CloudCompute (is_cloud: true, is_hosting: true)
• CIDR Block: 198.244.128.0/17

## Network Classification

• DNS PTR: proxy-uk004-san184.ahrefs.net
• Hosted Domain: ahrefs.net
• Services: None (firewalled/no services exposed)
• Tor/Proxy: No
• CDN: No

## Threat Indicators

• Abuse Confidence: Not scored
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listed: 2 of 8 total lists
• Known Campaigns: None detected
• Threat Persistence: 0 days (not persistently malicious)

## Neighborhood Assessment

• Subnet: 198.244.183.184/24
• Abuse Density Classification: high_abuse
• Total Siblings: 256
• Active Siblings: 211
• Threat Siblings: 205
• Inherited Risk Score: 32

The subnet exhibits elevated abuse activity, with 205 out of 211 active sibling IPs flagged as threats.

## Signal History (Last 23 Observations)

Recent signal analysis (June 2026) confirms consistent cloud hosting classification with OVH provider designation. Abuse density signals persistently show high_abuse classification across multiple observation points. No significant ownership changes or shifts in network role detected.

## Network Relationships

• Primary Association: OVH_282347340 network
• Relationship Count: 38 total
• Connection Type: Same Network (OVH infrastructure)

## Recommended Security Actions

No specific blocking actions currently recommended. The IP is associated with legitimate infrastructure (ahrefs.net) but operates within a high-abuse-density subnet.

SOC Analyst Notes:

• Monitor for lateral movement from the 198.244.183.0/24 subnet
• 80.08% abuse density warrants enhanced scrutiny
• No active ports detected; may be dormant or hidden service
• DNSBL listings indicate prior abuse history

Classification: MODERATE RISK — Cloud hosting infrastructure within high-abuse subnet

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.