198.244.183.10📋 Copy

## INTELLIGENCE BRIEFING: 198.244.183.10

Classification: Moderate Risk | Date: 2026-06-20

Executive Summary

IP 198.244.183.10 operates as cloud infrastructure (OVH, ASN 16276) in London, UK. The IP resolves to ahosts.net domain (proxy-uk004-san10.ahrefs.net) and exhibits moderate risk (score: 40) with elevated neighborhood abuse density. While not flagged as a known attacker, the subnet shows significant malicious activity correlation requiring defensive monitoring.

Technical Profile

Threat Indicators

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists
• Campaign Correlation: None identified

Neighborhood Analysis (198.244.183.0/24)

• Abuse Density: 0.793 (High Abuse Classification)
• Threat Siblings: 203 of 256 active IPs
• Inherited Risk: 31
• Medium Risk Neighbors: 27 of 100 sampled neighbors

Control Plane Status

• Route Stability: False (instability detected)
• BGP Prefix: 198.244.128.0/17
• DNSSEC: Valid
• CAA Records: Present

Observations History

20 signal observations tracked. Recent signals confirm cloud hosting infrastructure classification. Control plane indicators show route changes over the past 30 days, suggesting potential infrastructure reconfiguration.

Recommended Actions

Based on risk profile and neighborhood context, the following defensive measures are recommended:

```bash

# iptables

iptables -A INPUT -s 198.244.183.10 -j DROP

# nftables

nft add rule inet filter input ip saddr 198.244.183.10 drop

# nginx

deny 198.244.183.10;

# pfSense

198.244.183.10/32

# Cloudflare WAF

{

"description": "Block 198.244.183.10 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 198.244.183.10"

}

}

# AWS WAF

{

"Addresses": ["198.244.183.10/32"],

"Description": "IPDebrief risk 40"

}

```

Analyst Notes

The IP should be blocked at the perimeter due to elevated neighborhood abuse density and DNSBL listings. The subnet exhibits high malicious activity correlation, making continued traffic from this IP potentially associated with compromised or abusive operations. Monitor for related IPs from the same /24 subnet. The moderate risk score combined with high neighborhood density suggests this IP may be part of broader infrastructure used for coordinated attacks.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.