198.50.202.93📋 Copy

Threat Intelligence Briefing for IP 198.50.202.93

Date: 2026-06-11

---

**1. IP Profile**

• Risk Score: Moderate (65/100)
• Ownership:

- ASN: 16276 (OVH)

- Organization: bestvoiper, sas

- Network: OVH-CUST-330150319

• Geolocation:

- Country: Canada (CA)

- City: Bogota (Colombia) – potential geolocation discrepancy.

• Network Role: CloudCompute (OVH infrastructure).
• Services:

- Open Port: 80 (HTTP)

- Server: Nginx

- Fingerprint: HTTP/1.1, no HSTS or HTTP/2.

---

**2. Observation History**

• Recent Activity:

- DNSSEC validation confirmed.

- 3 DNSBL listings (potential spam or abuse risk).

- HTTP server fingerprinted as Nginx with no security headers (e.g., HSTS, CSP).

• Threat Indicators:

- No malware, phishing, or known attacker associations.

- No active scans or suspicious DNS activity.

---

**3. Relationships**

• DNS Associations:

- Resolves to `ip93.ip-198-50-202.net` (no domain or email auth records).

• Network:

- Subnet `198.50.202.93/24` (OVH-owned).

- No linked subnets, hostnames, or certificates.

---

**4. Neighborhood Analysis**

• Subnet: `198.50.202.93/24`
• Abuse Density: 0 (clean).
• Neighbors: No active siblings or threats in the subnet.

---

**5. Recommendations**

• Monitor DNSBL Status: Investigate 3 DNSBL listings for potential spam activity.
• Secure HTTP Server: Enable HSTS, HTTP/2, and CSP headers for the Nginx server.
• Verify Geolocation: Confirm if the IP is genuinely hosted in Canada or if there is a misconfiguration.
• Network Segmentation: Ensure isolation of cloud-hosted workloads to limit lateral movement risks.

---

Conclusion: The IP is owned by OVH and hosts a basic Nginx server with no immediate malicious indicators. While geolocation data is inconsistent, the absence of threats and low abuse density suggest it is a legitimate cloud-hosted service. Focus on securing the HTTP server and verifying DNS configurations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.