## IP Intelligence Briefing: 198.244.240.148/32
Classification: Moderate Risk Cloud Infrastructure Node
Executive Summary
IP 198.244.240.148 is a legitimate cloud hosting endpoint operated by Ahrefs Pte Ltd Dmytro (ASN 16276) on OVH infrastructure. While the IP itself shows moderate risk with no active threat indicators, the associated /24 subnet exhibits elevated abuse density (0.7031) with 180 threat-sibling IPs. No immediate blocking recommended, but continued monitoring advised.
---
Risk Profile
| Metric | Value |
|---|---|
| Overall Risk Score | 40 (Moderate Risk) |
| Provider Score | 0 |
| Authority Score | 0 |
| Infrastructure Type | CloudCompute |
| Hosting Provider | OVH |
| Location | London, England, GB |
---
Technical Characteristics
- DNS Resolution: proxy-uk006-san148.ahrefs.net (ahrefs.net)
- Services: No open ports detected (Firewalled / No Services)
- TLS: Not configured
- HTTP: No services detected
- DNSBL Listings: 1 out of 8 total lists
---
Network Context
- BGP Prefix: 198.244.128.0/17
- Subnet: 198.244.240.0/24
- Route Stability: Unstable
- DNSSEC: Valid
- CAA Records: Present
---
Neighborhood Analysis (198.244.240.0/24)
- Abuse Density: 0.7031 (High Abuse Classification)
- Inherited Risk Score: 28
- Total Subnet Siblings: 256
- Active Siblings: 158
- Threat Siblings: 180
- Risk Distribution: 100 Medium Risk, 0 High Risk, 0 Low Risk
---
Threat Indicators
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Count: 0
- Known Campaigns: None identified
---
Observation History
22 total observations recorded. Recent signals (2026-06-14) indicate consistent classification as high_abuse subnet with abuse density 0.7031. Multiple signals confirm OVH hosting infrastructure and ahrefs.net domain association.
---
Recommended Actions
1. Monitor: Continue traffic monitoring due to elevated neighborhood abuse density
2. No Block Required: IP shows legitimate hosting infrastructure with no active threat indicators
3. Review Traffic Patterns: Analyze if traffic patterns align with expected Ahrefs proxy usage
4. Watch List: Consider adding to watch list given 180 threat-sibling IPs in subnet
---
Analysis Date: Current
Data Sources: IPDebrief Profile, History, Relationships, Neighborhood
Confidence: High
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Ahrefs Pte Ltd Dmytro |
| ASN | AS16276 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | ARIN |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | proxy-uk006-san148.ahrefs.net |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | proxy-uk006-san148.ahrefs.net |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 20% | 2 | 3 |
| reputation | 30% | 1 | 3 |
| geolocation | 23% | 2 | 2 |
| Overall | 22% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-12 09:40:55 UTC |
| Last Seen | 2026-06-27 21:14:38 UTC |
| Profile Built | 2026-06-28 15:21:07 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 26 |
Full dossier details are available via our API.