198.244.240.185📋 Copy

# IP Intelligence Briefing: 198.244.240.185

Classification: Moderate Risk (Score: 40/100)

Date: June 15, 2026

Data Source: IPDebrief Threat Intelligence Platform

---

## Executive Summary

IP 198.244.240.185 is a cloud computing infrastructure address hosted by OVH (AS16276) in London, GB, with PTR hostname proxy-uk006-san185.ahrefs.net. The IP resolves to ahrefs.net domain and operates as cloud hosting infrastructure with no open services detected. While the individual IP maintains a moderate risk score, the surrounding /24 subnet demonstrates elevated abuse characteristics with a high abuse density classification.

---

## Infrastructure Profile

Network Role: The IP is identified as cloud hosting infrastructure with connection type unclassified. No open ports, TLS certificates, or HTTP services were detected during scanning.

---

## Threat Indicators

Campaign Assessment: No correlation to known campaigns. Campaign likelihood: None. No certificate matches or banner matches detected.

---

## Neighborhood Analysis (198.244.240.0/24)

Assessment: The /24 subnet exhibits elevated abuse characteristics with 207 threat-identified siblings out of 256 total IPs. This contextual risk factor suggests the IP operates within a higher-risk network environment, though the individual address maintains a moderate risk score.

Neighbor Risk Distribution (Sampled 100): 100 medium-risk IPs, 0 high-risk, 0 low-risk. All sampled neighbors returned risk score 40 with authority score 50.

---

## Observation History (23 Observations)

Recent signal observations (June 15, 2026) indicate:

• Network Classification: Consistent OVH cloud infrastructure assignment
• Subnet Status: Persistent "high_abuse" classification
• Geolocation: Validated (473.7km from claimed coordinates, 90ms average RTT)
• Threat Persistence: 0 days
• Ownership Changes: 0

The IP shows stability in ownership and network classification over the observation period.

---

## Network Relationships

37 relationships detected, all classified as "Same Network" associations with OVH infrastructure (OVH_282347342). This indicates the IP is part of a larger, interconnected cloud infrastructure footprint.

Control Plane Status:

• Route stability: False
• Operator score: 0.2174 (Minimal)
• RPKI state: Not assessed
• Route changes (30d): 0
• DNSSEC: Valid
• Has CAA records: Yes

---

## Recommended Actions

Based on the moderate risk profile and elevated neighborhood abuse density:

1. Monitor: Maintain observation of this IP within the SOC context

2. Contextual Assessment: Evaluate traffic patterns against the higher-risk /24 subnet characteristics

3. Threshold Consideration: The 40-risk score with 207 threat siblings in the subnet warrants awareness, though no immediate blocking is indicated

Firewall/NAT Rules: No specific blocking recommendations generated due to moderate risk classification and lack of active threat indicators.

---

Intel Confidence: Medium - Data sourced from IPDebrief platform with multiple signal corroboration.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.