198.244.168.250📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

## Target: 198.244.168.250/32

Classification: LOW RISK — Legitimate Cloud Infrastructure

Date: 2026-06-26

---

EXECUTIVE SUMMARY

IP 198.244.168.250 is a cloud hosting endpoint operated by OVH on behalf of Ahrefs Pte Ltd. The IP exhibits low-risk characteristics with a reputation score of 25/100. No active threat indicators or malicious behavior observed. The address resolves to aresidential cloud infrastructure in London, GB.

---

NETWORK OWNERSHIP & GEOLOCATION

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276 (OVH)
• Country: England, United Kingdom (GB)
• City: London
• Infrastructure Type: Cloud Compute / Hosting
• DNS Hostname: proxy-uk001-san250.ahrefs.net
• Parent Domain: ahrefs.net

---

RISK ASSESSMENT

• Overall Risk Score: 25/100 (Low)
• Reputation: Low Risk
• Abuse Confidence: Not applicable
• Known Campaigns: None detected
• Blacklist Status: Listed on 1 of 8 DNSBL providers
• Tor/Proxy/CDN: Negative on all checks

---

NETWORK CLASSIFICATION

• Provider: OVH (Cloud Hosting)
• Connection Type: Cloud Infrastructure
• Service Status: Firewalled / No Open Ports
• TLS/HTTP: No active services detected
• Certificate Authority: Validated DNSSEC and CAA records present

---

SUBNET ENVIRONMENT (198.244.168.0/24)

• Abuse Density: 0.4727 (Moderate)
• Classification: Mixed
• Total Siblings: 256 IPs
• Active Siblings: 208 IPs
• Threat Siblings: 121 IPs (47% of active addresses)
• Inherited Risk: 18/100

---

OBSERVATION HISTORY

• Total Observations: 22 signals
• Latest Activity: 2026-06-26
• Risk Trend: Stable
• Threat Persistence: 0 days
• Ownership Changes: 0

Recent signals confirm consistent classification as cloud infrastructure with minimal operator score (0.087) and mixed subnet abuse density.

---

RELATIONSHIP MAPPING

• Total Relationships: 51
• Primary Network: OVH_282347337 (repeated association)
• Network Classification: Same Network relationships dominate relationship graph
• No unusual associations detected

---

SECURITY RECOMMENDATIONS

Current Status: No immediate action required. Risk score of 25 falls within acceptable operational thresholds.

Defensive Controls:

1. Blocklist Consideration: DNSBL listing present on 1 of 8 lists — monitor for changes

2. Traffic Allow: Legitimate Ahrefs infrastructure — permit traffic if expected business activity

3. Monitoring: Track subnet abuse density; 121 threat siblings in /24 warrant awareness

---

INTELLIGENCE CONCLUSIONS

The IP 198.244.168.250 represents legitimate cloud hosting infrastructure for Ahrefs, a well-known SEO analytics platform. Despite subnet-level abuse density concerns, the specific IP demonstrates no malicious indicators. SOC teams should treat as benign but maintain awareness of broader subnet risk profile.

Confidence Level: High — Multiple corroborating signals across profile, history, and relationship data.

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.