198.244.168.200📋 Copy

# IP INTELLIGENCE BRIEFING

Target IP: 198.244.168.200/32

Classification: Moderate Risk (Score: 40)

Date: 2026-06-23

---

## EXECUTIVE SUMMARY

IP 198.244.168.200 presents a moderate risk profile (40/100) associated with OVH cloud infrastructure in London, England. While the IP itself lacks direct malicious indicators, it operates within a high-abuse-density subnet (0.793 abuse density) with 203 sibling IPs flagged as threats. No active services are detected on the target IP; it functions as a firewalled infrastructure endpoint.

---

## OWNERSHIP AND INFRASTRUCTURE

---

## THREAT ASSESSMENT

Direct Threat Indicators: None detected

• No Tor exit node activity
• No known campaign associations
• Zero blacklist listings
• No spam source classification

Subnet Context: CRITICAL

• Abuse Density: 0.793 (high_abuse classification)
• Active Siblings: 199/256 IPs
• Threat Siblings: 203 IPs flagged for abuse
• Neighborhood Risk Score: 31 (inherited)

---

## OBSERVATION HISTORY

Signal Count: 30 observations tracked

• Recent Activity: Signals observed on 2026-06-19 and 2026-06-23
• Geolocation Consistency: Validated at 473.7km distance from probe origin
• Operator Score: 0.6087 (Moderate confidence)
• Threat Persistence: Not persistently malicious (0 threat observation days)

---

## NETWORK BEHAVIOR

Note: Infrastructure appears firewalled with no publicly accessible services.

---

## RECOMMENDED ACTIONS

Blocking Recommended: Yes (based on subnet abuse density and moderate risk)

Firewall Rules

---

## ANALYST NOTES

1. Subnet Correlation: 79% of /24 subnet (198.244.168.0/24) shows abuse density. Consider blocking entire /24 if policy permits.

2. OVH Cloud Context: Infrastructure hosted on OVH in London. Multiple IPs in same network (OVH_282347337) show similar risk profiles.

3. False Positive Risk: While direct threat indicators are absent, the high-abuse neighborhood suggests potential for compromised infrastructure within the same hosting block.

4. Monitoring Recommendation: Track for any service emergence or threat indicator emergence within the 198.244.168.0/24 subnet.

---

Report Generated: IPDebrief Intelligence Platform

Classification: Threat Intelligence - Defensive Security Use Only

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.