198.244.240.175📋 Copy

# IP Intelligence Briefing: 198.244.240.175

Classification: Moderate Risk | Date: Current

Analyst: Automated IPDebrief System

---

## Executive Summary

IP address 198.244.240.175 is a cloud-hosting infrastructure endpoint associated with Ahrefs Pte Ltd Dmytro, operating under OVH ASN 16276. The IP presents a moderate risk score of 40/100 with high abuse density classification (0.7969) within its /24 subnet. No active services are currently detected on the endpoint.

---

## Technical Profile

---

## Threat Indicators

• DNSBL Status: Listed on 1 of 8 threat feeds
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Association: None detected

---

## Subnet Neighborhood Analysis

Subnet: 198.244.240.0/24

• Abuse Density: 0.7969 (High)
• Total Siblings: 256
• Active Siblings: 165
• Threat Siblings: 204

The endpoint resides in a high-abuse-density subnet with approximately 80% of sibling IPs flagged as threats. Neighboring addresses (198.244.240.0-4) consistently show risk scores of 40-50 with authority scores of 50.

---

## Historical Observations (24 Signals Tracked)

Recent Activity:

• June 18, 2026: High abuse subnet classification (0.7969)
• June 14, 2026: Ownership changes: 0; Threat persistence: 0 days
• Status: Not persistently malicious

The IP has demonstrated single threat observation events without persistent malicious behavior patterns.

---

## Network Relationships

• Network Associations: 49 relationships identified
• Primary Network: OVH_282347342
• Route Stability: Not stable (route changes observed in past 30 days)

---

## Recommended Actions

Firewall/Network Recommendations:

1. Monitor Closely: The IP's high-abuse subnet context warrants continued monitoring despite moderate risk score.

2. Geo-Location Context: Traffic originates from London, GB (RTT: 500-530ms). Verify against expected traffic patterns.

3. DNS Resolution: PTR hostname indicates proxy infrastructure (proxy-uk006-san175.ahrefs.net).

4. No Active Services: No open ports detected; endpoint appears firewalled or in standby.

---

## Threat Assessment

Current Status: Moderate Risk

• Risk Score: 40/100
• Subnet Classification: High Abuse
• Threat Persistence: Low (single observation event)
• Campaign Likelihood: None

Key Finding: While the individual IP shows moderate risk, the broader subnet (198.244.240.0/24) exhibits high abuse density. This contextual risk should factor into security decisions even if the specific endpoint is currently inactive.

---

*Intelligence generated from IPDebrief automated analysis. Data current as of report generation.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.