198.244.242.107📋 Copy

# IP Intelligence Briefing: 198.244.242.107/32

Classification: MODERATE RISK INFRASTRUCTURE IP

Report Date: 2026-06-15

Data Source: IPDebrief Intelligence Platform

## Executive Summary

IP 198.244.242.107 is a cloud computing infrastructure endpoint hosted on OVH's UK datacenter infrastructure. The IP resolves to ahrefs.net domain and operates under Ahrefs Pte Ltd Dmytro organization. Risk assessment indicates Moderate Risk (Score: 40) with no direct threat indicators, though the subnet demonstrates elevated abuse characteristics.

## Key Findings

Infrastructure Profile

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276 (OVH)
• Location: London, England, GB (750km accuracy radius)
• Network Classification: CloudCompute / Hosting
• DNS Resolution: proxy-uk007-san107.ahrefs.net
• Service Status: Firewalled / No Services Detected

Risk Assessment

• Overall Risk Score: 40/100 (Moderate Risk)
• Operator Score: 0.2174 (Minimal operator risk)
• DNSBL Listings: 1 out of 8 total blacklists
• Known Attackers: No
• Tor Exit Node: No
• Spam Source: No

Neighborhood Analysis

• Subnet: 198.244.242.107/24
• Abuse Density: 0.6289 (High Abuse Classification)
• Active Siblings: 206 of 256 total IPs
• Threat Siblings: 161 identified as threats
• Inherited Risk: 25 from subnet context

Historical Observations

• Total Signals: 17 observations
• Most Recent: 2026-06-15 04:17 UTC
• Geolocation Confidence: 0.28 (GB inferred)
• DNS Resolution Confidence: 0.80 (ahrefs.net)
• Threat Persistence: No persistent malicious activity detected

Network Relationships

• Network Association: Multiple relationships to OVH_282347343
• DNS Associations: 18+ associations to proxy-uk007-san107.ahrefs.net

## SOC Recommendations

Monitoring Priority

MEDIUM — Monitor for abuse patterns within the /24 subnet context

Recommended Actions

• Allow if traffic is confirmed legitimate Ahrefs service
• Block if originating from unexpected sources or showing port scanning behavior
• Investigate any connections from this subnet showing anomalous traffic patterns

Key Indicators

• Block List: Listed on 1 DNSBL (verify current status)
• Certificate Status: No TLS certificates observed
• Open Ports: None detected
• BGP Prefix: 198.244.128.0/17 (stable routing)

Contextual Notes

The IP belongs to a high-abuse density subnet (0.6289) with 161 threat-identified siblings. While this specific endpoint shows no direct threat indicators, SOC teams should correlate traffic with known Ahrefs services and monitor for lateral movement within the subnet. The infrastructure appears to be a legitimate cloud-hosted proxy endpoint for ahrefs.net services.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.