198.244.242.155📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 198.244.242.155/32

Date: Current

Classification: MODERATE RISK

## EXECUTIVE SUMMARY

IP 198.244.242.155 operates as firewalled cloud compute infrastructure within the OVH network (ASN 16276) in London, GB. The IP resolves to Ahrefs proxy hostname and presents a moderate risk score of 40. While the specific address shows no direct threat indicators, its /24 subnet exhibits elevated abuse density (0.6641) with 170 threat siblings among 207 active neighbors.

## OWNERSHIP & GEOLOCATION

• ASN: 16276 (OVH)
• Organization: Ahrefs Pte Ltd Dmytro
• Location: London, England, GB
• Infrastructure Type: Cloud Compute, Hosting
• Network Role: Cloud infrastructure with firewalled/no services detected

## THREAT INDICATORS

• Risk Score: 40 (Moderate Risk)
• Threat Indicators: None detected on this IP
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Campaign Likelihood: None

## NETWORK BEHAVIOR

• Open Ports: None detected
• DNS Resolution: proxy-uk007-san155.ahrefs.net
• Infrastructure: Cloud-hosted (OVH), firewalled
• Control Plane: Route stable, DNSSEC valid, CAA records present

## SUBNET CONTEXT (198.244.242.0/24)

• Abuse Density: 0.6641 (HIGH ABUSE CLASSIFICATION)
• Total Siblings: 256
• Active Siblings: 207
• Threat Siblings: 170
• Inherited Risk: 26
• Risk Distribution: All 100 sampled neighbors show medium risk (40-50)

## OBSERVATION HISTORY

• Total Observations: 25
• Threat Persistence Days: 0
• Recent Activity: Signals observed June 2026 with minimal operator scores (0.2174)
• Status: Not persistently malicious

## RECOMMENDATIONS

1. Monitor Subnet Context: While this IP shows no direct threats, the subnet's high abuse density warrants continued monitoring.

2. DNS Reputation: The Ahrefs proxy hostname suggests legitimate use, but correlate with traffic patterns.

3. No Immediate Action Required: IP is firewalled with no open services and no direct threat indicators.

4. Correlation Analysis: Monitor for connection attempts to this subnet given the 170 threat-sibling count.

## INDICATORS OF COMPROMISE (IOC)

• IP: 198.244.242.155
• Hostname: proxy-uk007-san155.ahrefs.net
• ASN: 16276
• Network: 198.244.242.0/24

Analyst Note: This IP represents legitimate cloud hosting infrastructure with a clean direct profile. However, SOC analysts should maintain awareness of the subnet's elevated abuse context when evaluating traffic patterns or connection requests to this network segment.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.