198.244.242.202📋 Copy

# IP Intelligence Briefing: 198.244.242.202

## Executive Summary

IP 198.244.242.202 is assigned to Ahrefs Pte Ltd Dmytro (ASN 16276) and hosted on OVH cloud infrastructure in London, England. While currently classified as Moderate Risk (risk score: 50), the IP resides within a high-abuse subnet (198.244.242.0/24) with an abuse density of 0.6719, indicating elevated neighborhood-level risk.

## Ownership and Infrastructure

• Organization: Ahrefs Pte Ltd Dmytro
• ASN: 16276 (OVH)
• Location: London, England, GB
• Infrastructure Type: Cloud compute (OVH hosting environment)
• DNS Resolution: proxy-uk007-san202.ahrefs.net (ahrefs.net domain)

## Risk Assessment

• Overall Risk Score: 50/100 (Moderate)
• Provider Score: 0
• Authority Score: 0
• Stability: No persistent ownership or threat persistence observed
• Threat Indicators: No active threat indicators; not identified as Tor exit, known attacker, or spam source
• DNSBL Listings: Listed on 2 of 8 total DNSBLs

## Neighborhood Analysis

The IP operates within the 198.244.242.0/24 subnet, characterized as high abuse:

• Abuse Density: 0.6719 (67.19%)
• Total Siblings: 256
• Active Siblings: 206
• Threat Siblings: 172
• Risk Distribution: 100 medium-risk neighbors, 0 high-risk, 0 low-risk

## Historical Observations

Analysis of 23 signal observations reveals:

• Recent DNSBL listings observed as of June 17, 2026
• Consistent DNS resolution to ahrefs.net infrastructure
• No evidence of persistent malicious activity or campaign correlation
• Operator score: 0.2174 (labeled "Minimal")

## Technical Configuration

• Open Ports: None detected (Firewalled/No Services)
• TLS Certificate: None
• HTTP Services: None active
• DNSSEC: Valid
• CAA Records: Present

## Recommended Actions

Based on the moderate risk profile and neighborhood abuse context, defensive measures include:

Firewall Rules:

• iptables: `iptables -A INPUT -s 198.244.242.202 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 198.244.242.202 drop`
• nginx: `deny 198.244.242.202;`
• pfSense: Block 198.244.242.202/32

WAF Configuration:

• Cloudflare WAF: Block IP with expression `ip.src eq 198.244.242.202`
• AWS WAF: Add IP 198.244.242.202/32 to IP set

## Analyst Notes

While the IP is registered to legitimate Ahrefs infrastructure, the high-abuse neighborhood context suggests potential for compromise or abuse. The lack of active services and firewalling indicates the IP may be dormant or used for specific purposes. Monitoring is recommended due to the subnet-level abuse profile, but immediate blocking may be warranted depending on organizational threat tolerance.

---

*Report generated: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.