IOC Radar
IPMediumSignal 69/100

198.244.242.27

Location
United KingdomUnited Kingdom
London, England
ASN
AS16276
Ahrefs Pte Ltd Dmytro
First Seen
May 2, 2025
Last Seen
May 31, 2026
May 2
First Seen
410d ago
May 31
Last Seen
16d ago
13
Reports
source reports
69%
Confidence
medium
Found in 13 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
69%
Signal Score
69 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

10 techniques

Network Information

CountryGBUnited Kingdom
RegionLondon, England
ASNAS16276
OrganizationAhrefs Pte Ltd Dmytro

IP Category

⟲
Proxy
Proxy server

Feed Intelligence Summary

13 reports69% confidence
13
Source reports
69%
Confidence score
Category tags
active scanactive scanningahrefs-benignaptbad web botbeningbening scannerblocklist_allbotnet activitybrute forcebrute force attackbrute force attackerbrute-forcecredential accesscredential stuffingddosdenial of serviceeuropeexploitation activityfrancegbhackingidentity & access exploitationindicatornetworkopen proxypassword attacksproxyreconnaissanceresearchedscannerssh attackt1110.001t1110.002t1110.003t1110.004t1190t1203t1499.001t1595.001t1595.002t1595.003threat actortor nodeunited kingdomverified-benignwebweb app attackweb application attackweb exploitation

Activity Timeline

1 total obs
May 31May 31

Threat Activity Heatmap

· Peak: 2026-05-31
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
69
SIGNAL
Signal Score
69%
Confidence
13
Reports
First seenMay 2, 2025
Last seenMay 31, 2026
GeolocationGB
CountryUnited Kingdom
LocationLondon, England
ASNAS16276
OrgAhrefs Pte Ltd Dmytro
Coords48.8582, 2.3387
Proxy

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected performing web attacks against Cloudflare honeypot edge
raw
inetnum: 198.244.242.0 - 198.244.242.255 netname: OVH_282347343 country: GB descr: Failover Ips org: ORG-APLD1-RIPE admin-c: OTC14-RIPE tech-c: OTC14-RIPE status: LEGACY mnt-by: OVH-MNT created: 2023-07-24T11:38:58Z last-modified: 2023-07-24T11:38:58Z source: RIPE organisation: ORG-APLD1-RIPE org-name: Ahrefs Pte Ltd Dmytro org-type: OTHER address: 16 RAFFLES QUAY #33-03 address: 048581 Singapore address: SG phone: +65.85915924 mnt-ref: OVH-MNT mnt-by: OVH-MNT created: 2014-08-29T12:26:04Z last-modified: 2017-10-30T16:31:11Z source: RIPE # Filtered role: OVH UK Technical Contact address: OVH Ltd address: New London House, 6 London Street address: EC3R 7LP, LONDON address: UK admin-c: OK217-RIPE tech-c: GM84-RIPE nic-hdl: OTC14-RIPE abuse-mailbox: [email protected] mnt-by: OVH-MNT created: 2009-09-16T16:09:57Z last-modified: 2017-01-17T09:52:03Z source: RIPE # Filtered route: 198.244.128.0/17 origin: AS16276 mnt-by: OVH-MNT created: 2021-03-09T14:12:57Z last-modified: 2021-03-09T14:12:57Z source: RIPE
references
https://jamesbrine.com.au/cfglobal-web-ip-list-2026-04-15/, https://jamesbrine.com.au

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 16 days ago
Appeared in 13 threat reports