198.244.240.159📋 Copy

## IP Intelligence Briefing: 198.244.240.159

Classification: Moderate Risk | Provider: OVH | Location: London, GB

Executive Summary

IP 198.244.240.159 is a cloud hosting infrastructure address operated by OVH (ASN 16276) under Ahrefs Pte Ltd Dmytro. The IP resolves to a DNS hostname (proxy-uk006-san159.ahrefs.net) within the ahrefs.net domain and is classified as cloud compute infrastructure. Current risk assessment indicates moderate risk (score 40) with no active threat indicators or known malicious campaigns.

Infrastructure Profile

Neighborhood Context

The IP resides in subnet 198.244.240.0/24, which demonstrates elevated abuse density:

• Abuse Density: 0.7031 (high_abuse classification)
• Total Siblings: 256 IPs
• Active Siblings: 158
• Threat Siblings: 180
• Inherited Risk: 28

All sampled neighbors in the /24 subnet maintain medium risk scores (40-50), indicating consistent operational patterns within the infrastructure block rather than isolated malicious activity.

Observational History

Analysis of 23 observations reveals:

• Recent classification: high_abuse subnet density
• Provider identification: OVH cloud infrastructure
• DNS activity: Consistent ahrefs.net domain resolution
• Geographic inference: GB with 750km accuracy radius
• Operator score: 0.2174 (Minimal threat operator)
• No ownership or threat persistence changes detected

Control Plane Indicators

• BGP Prefix: 198.244.128.0/17
• Route Stability: Unstable (false)
• DNSSEC: Valid
• DNSBL Listings: 1 of 8 total lists
• RPKI State: Not verified
• IRR Consistency: Not verified

Threat Assessment

Current Status: No active threat indicators detected

• Known Campaigns: None
• Blacklist Count: 0
• Tor Exit/Proxy/VPN: False
• Known Attacker: False
• Spam Source: False
• Certificate Matches: 0

Risk Factors:

1. Subnet classified as high_abuse due to density metrics

2. Route instability detected in control plane

3. Single DNSBL listing among 8 evaluated lists

Recommended Actions

1. Monitoring: Maintain standard monitoring; no immediate blocking required

2. Allow Rules: Permitted traffic from ahrefs.net infrastructure

3. Firewall Configuration: No specific iptables/nftables rules recommended

4. Investigation Priority: Medium (contextual risk from neighborhood density, not IP-specific threat)

---

Generated: IPDebrief Intelligence Platform

Status: Information current as of most recent observation

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.