198.244.183.16📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 198.244.183.16/32 | Classification: Moderate Risk | Date: 2026-06-20

---

## EXECUTIVE SUMMARY

IP 198.244.183.16 is a cloud-hosted infrastructure node operating under Ahrefs Pte Ltd Dmytro (ASN 16276, OVH) in London, United Kingdom. The IP presents a moderate risk profile (50/100) with no active threat indicators currently detected. However, the IP resides within a high-abuse-density subnet requiring contextual monitoring. No active services or open ports were observed.

---

## OWNERSHIP & INFRASTRUCTURE

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276 (OVH)
• Location: London, England, GB (750km accuracy radius)
• Infrastructure Type: Cloud Compute / Hosting
• DNS Hostname: proxy-uk004-san16.ahrefs.net
• Network Block: 198.244.128.0/17

No active services, open ports, or TLS certificates were detected. The IP appears firewalled with no HTTP/HTTPS services responding.

---

## THREAT INDICATORS

• Risk Score: 50 (Moderate)
• Abuse Confidence: Not calculated
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• DNSBL Listings: 2 of 8 total lists
• Threat Feeds: Empty
• Campaign Correlation: None detected

---

## NETWORK CONTEXT

The IP is situated in subnet 198.244.183.16/24, which exhibits elevated abuse characteristics:

• Subnet Abuse Density: 0.793 (High)
• Classification: high_abuse
• Inherited Risk Score: 31
• Total Subnet Siblings: 256
• Active Siblings: 211
• Threat Siblings: 203

Risk distribution across queried neighbors: 41 medium-risk, 59 low-risk, 0 high-risk.

---

## OBSERVATION HISTORY

Analysis of 20 historical signals reveals consistent network classification with no significant risk escalation. Recent observations (2026-06-20) confirm:

• Stable cloud hosting classification
• Consistent UK geolocation inference
• Persistent high-abuse subnet classification
• No ownership changes detected

---

## RELATIONSHIPS

43 relationship entries identified, primarily network-level associations to OVH_282347340. No organizational or certificate-based relationships detected beyond the hosting provider.

---

## RECOMMENDED ACTIONS

Risk Score: 50 / 100 — Probabilistic blocking recommended pending additional context.

Firewall Rules

---

## ANALYST NOTES

This IP appears to be part of Ahrefs' proxy infrastructure but resides within an OVH subnet with documented abuse density. The moderate risk score is elevated primarily by neighborhood context rather than direct malicious activity. Recommend monitoring for pattern changes in outbound traffic to/from this IP, particularly given the subnet's high abuse density. No immediate threat action required, but maintain awareness of related subnet activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.