198.244.240.252📋 Copy

IP INTELLIGENCE BRIEFING: 198.244.240.252/32

Classification: Low Risk / Cloud Infrastructure Asset

---

**EXECUTIVE SUMMARY**

IP 198.244.240.252 is a low-risk (score: 25/100) cloud hosting address belonging to OVH (ASN: 16276) in London, GB. The IP resolves to aresolves proxy-uk006-san252.ahrefs.net and is associated with Ahrefs Pte Ltd Dmytro. No active threat indicators detected; however, the /24 subnet shows elevated abuse density (0.4844) with 124 threat siblings among 211 active peers.

---

**NETWORK IDENTIFICATION**

• IP Address: 198.244.240.252
• ASN: 16276 (OVH SAS)
• Organization: Ahrefs Pte Ltd Dmytro
• Country/Region: England, GB
• Geolocation: London (750km accuracy radius)
• Infrastructure Type: CloudCompute / Hosting
• Network Role: Firewalled / No Services Detected

---

**REPUTATION & THREAT ANALYSIS**

• Risk Score: 25/100 (Low Risk)
• Reputation: Low Risk
• Blacklist Status: 0 abuse entries
• Threat Indicators: None detected
• Campaign Association: None
• Tor/Proxy/VPN: False
• Known Attacker: No

*Note: DNSBL listing detected (1/8 lists) despite null abuseConfidenceScore.*

---

**DNS & SERVICE PROFILE**

• PTR Hostname: proxy-uk006-san252.ahrefs.net
• Forward Resolution: 1 confirmed hostname
• Open Ports: None detected
• TLS/HTTP Services: No active services observed
• Certificate Authority (CAA): Valid
• DNSSEC: Valid

---

**SUBNET NEIGHBORHOOD ANALYSIS**

• Subnet: 198.244.240.252/24
• Abuse Density: 0.4844 (Mixed Classification)
• Total Siblings: 256
• Active Siblings: 211
• Threat Siblings: 124
• Inherited Risk Score: 19/100

*Risk context: The /24 subnet shows mixed classification with significant threat presence. Monitor adjacent IPs for coordinated activity.*

---

**OBSERVATION HISTORY**

• Total Signals: 21 observations
• Recent Signals (2026-06-26):

- Geolocation: GB (confidence: 0.28)

- Subnet Classification: Mixed (confidence: 0.75)

- Network Role: CloudCompute/Hosting (confidence: 0.90)

- Operator Score: Minimal (0.087)

*Temporal analysis indicates persistent benign behavior with no escalation patterns.*

---

**RELATIONSHIP GRAPH**

• Total Relationships: 57
• Primary Link: Same Network (OVH_282347342)
• Correlated IPs: 0
• Cert Matches: 0

---

**SOC ACTION RECOMMENDATIONS**

Immediate Actions:

• No blocking required; risk score indicates benign cloud infrastructure
• Monitor for service initiation if previously firewalled
• Verify DNS resolution against expected ahrefs.net domain

Defensive Configuration:

• Standard cloud infrastructure allowlist rules apply
• No specific firewall rules recommended
• Implement standard OVH network segmentation policies

Monitoring Priorities:

• Track subnet abuse density changes (current: 0.4844)
• Monitor for service/port opening on this address
• Watch for DNS changes deviating from ahrefs.net pattern

Risk Assessment: Low. This IP represents legitimate cloud hosting infrastructure with no active malicious indicators. Standard operational monitoring recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.