198.244.240.166📋 Copy

# IP Intelligence Briefing: 198.244.240.166

## Executive Summary

IP 198.244.240.166 presents a MODERATE RISK profile (Risk Score: 40) associated with OVH cloud infrastructure in London, GB. The IP is currently firewalled with no active services but resides within a high-abuse density subnet (0.8359). No active threat indicators were observed.

---

## Technical Profile

Ownership & Registration:

• ASN: 16276 (OVH)
• Organization: Ahrefs Pte Ltd Dmytro
• RIR: ARIN
• Network Role: CloudCompute / Hosting / Firewalled

Geolocation:

• Location: London, England, GB
• Coordinates: 55.38°N, -3.44°W
• Geo Confidence: Consensus confirmed (750km accuracy)

DNS Resolution:

• PTR Hostname: proxy-uk006-san166.ahrefs.net
• Forward Resolves: ahrefs.net
• Email Authentication: SPF: No | DMARC: No

Services: No open ports detected. Infrastructure is firewalled with no active services exposed.

---

## Threat Assessment

Active Threat Indicators: None

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Threat Feeds: None

Control Plane Status:

• BGP Prefix: 198.244.128.0/17
• Operator Score: 0.2174 (Minimal)
• DNSSEC Valid: Yes
• DNSBL Listed: 1 of 8 total lists

---

## Neighborhood Analysis (198.244.240.0/24)

Assessment: The /24 subnet exhibits elevated abuse activity with 214 threat siblings. While this IP shows no active threats, the neighborhood context warrants contextual awareness.

---

## Observation History

Recent signals (2026-06-20) confirm:

• Subnet classification: HIGH ABUSE (0.8359 density)
• Operator assessment: MINIMAL
• DNS records: CAA present, DNSSEC valid
• 20 total observations recorded

---

## Relationships

43 relationship entries identified, primarily same-network associations with OVH infrastructure (OVH_282347342).

---

## SOC Action Recommendations

1. Allow Traffic: No active services detected; blocking is not required.

2. Monitor Closely: The subnet shows high abuse density—monitor for service activation.

3. Email Filtering: No SPF/DMARC records on ahrefs.net—consider filtering if used for email.

4. Baseline Context: Risk score of 40 is moderate; treat as known hosting infrastructure.

5. No Immediate Blocks: No threat indicators or active malicious behavior observed.

---

Classification: Moderate Risk – Hosted Infrastructure

Last Updated: 2026-06-20

Data Source: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.