198.244.242.114📋 Copy

# IP Intelligence Briefing: 198.244.242.114/32

## Executive Summary

The IP address 198.244.242.114 is a cloud compute resource belonging to OVH infrastructure (ASN 16276), associated with Ahrefs Pte Ltd Dmytro. The IP presents a moderate risk profile (Score: 40) within a high-abuse density subnet (198.244.242.0/24). The address is actively classified as hosting infrastructure with a forward-confirmed DNS association to proxy-uk007-san114.ahrefs.net.

## Ownership and Infrastructure

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276 (OVH)
• Geolocation: London, England, GB (750km accuracy radius)
• Infrastructure Type: Cloud Compute (Hosting)
• BGP Prefix: 198.244.128.0/17
• Service Purpose: Firewalled / No Services

## Threat Profile

• Risk Score: 40 (Moderate)
• Abuse Confidence: Not explicitly flagged as attacker/spam source
• Blacklist Status: 0 current blacklists
• Tor Exit/Proxy/VPN: Negative across all categories
• Campaign Likelihood: None
• DNSBL Listed: 1 of 8 lists

## Network Context and Risk Environment

The IP resides in subnet 198.244.242.0/24, which is classified as "high_abuse":

• Abuse Density: 0.6719 (67.19%)
• Active Siblings: 206 of 256 IPs
• Threat Siblings: 172 IPs flagged as threats
• Inherited Risk Score: 26

Control plane analysis indicates minimal operator score (0.2174) and stable routing (isRouteStable: false, routeChanges30d: 0).

## Historical Signal Analysis

The IP has generated 22 historical observations. Key temporal signals include:

• June 2026: Geolocation signals consistent with GB location (confidence: 0.28-0.75)
• Abuse density: Persistently classified as high abuse (0.6719)
• Provider classification: Consistent OVH hosting infrastructure identification
• Control plane: Operator score maintained at 0.2174 (Minimal)

## DNS and Network Relationships

• Forward-Resolved Hostname: proxy-uk007-san114.ahrefs.net (ahrefs.net domain)
• PTR Record: proxy-uk007-san114.ahrefs.net
• DNS Association: 17 relationship entries to the same hostname
• Network Relationship: Multiple entries to OVH_282347343 network identifier

## Service Status

• Open Ports: None detected
• TLS Certificate: None
• HTTP Service: None
• Server Banner: None
• Fingerprint: No distinctive HTTP headers or TLS indicators

## Recommended SOC Actions

1. Baseline Assessment: Treat as legitimate hosting infrastructure (Ahrefs SaaS provider)

2. Monitor Neighboring IPs: Subnet shows 172 threat siblings; monitor 198.244.242.0/24 for correlated malicious activity

3. DNSBL Validation: Investigate 1 DNSBL listing for context

4. Traffic Analysis: Evaluate inbound traffic patterns for anomalies given the high-abuse neighborhood context

5. Threat Intelligence Correlation: No active campaigns or known attacker associations detected

---

*Report generated: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.