15.204.8.16
IP INTELLIGENCE BRIEFING: 15.204.8.16/32
Classification: LOW RISK / MONITOR
Executive Summary:
IP 15.204.8.16 is a cloud compute VPS hosted by OVH US LLC (ASN 16276) in Hillsboro, Oregon. Risk score of 25 (low risk). IP is currently firewalled with no accessible services, no active threat indicators, and zero blacklist listings. Requires standard defensive monitoring.
---
Technical Profile:
- Provider: OVH US LLC
- Network: VPS-US-WEST-OR-2 (15.204.8.0/23)
- Location: United States, Oregon, Hillsboro
- Infrastructure Type: Cloud Compute / Hosting
- DNS Resolution: vps-e6ef4e24.vps.ovh.us / vps-3cdfcda6.vps.ovh.us
- Services: None exposed (Firewalled/No Services)
- SSL/TLS: No certificates detected
---
Threat Indicators:
- Risk Score: 25 (Low Risk)
- Blacklist Status: Currently listed on 1 of 8 threat feeds (high severity listing)
- Tor/Proxy: Not a Tor exit node, proxy, or VPN
- Campaign Correlation: No known malware campaigns
- Known Attacker: False
- Spam Source: False
---
Observation History:
- 28 historical observations recorded
- Network classification consistently identifies as OVH cloud infrastructure with high confidence (0.85-0.90)
- Geolocation consistently resolves to US/Hillsboro, Oregon
- Recent threat observation shows elevated blacklist severity
- No evidence of persistent malicious activity
---
Network Context:
- Subnet Analysis: 15.204.8.16/24 neighborhood shows abuse density of 0
- Related Entities: 35 relationships identified, primarily DNS associations and network-level relationships
- Control Plane: BGP prefix 15.204.0.0/17, route stability concerns present (isRouteStable: false)
---
Recommended Actions:
1. Monitor the single high-severity blacklist listing for changes
2. No immediate blocking required due to low overall risk profile
3. Standard logging recommended for inbound/outbound traffic analysis
4. Periodic re-scanning advised to verify continued clean status
---
Assessment: This IP represents legitimate cloud infrastructure with minimal threat footprint. The single blacklist listing warrants awareness but does not indicate active malicious behavior. SOC teams should maintain standard monitoring protocols without escalation.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | OVH US LLC |
| ASN | AS16276 |
| Network Name | VPS-US-WEST-OR-2 |
| CIDR Block | 15.204.8.0/23 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | vps-e6ef4e24.vps.ovh.us |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | vps-3cdfcda6.vps.ovh.us |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Apache/2.4.63 |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
🔐 TLS Certificate
| SANs | api-ovh.luccc.ukcpa-ovh.luccc.uk |
| Valid From | 2026-08-12T01:16:43+00:00 |
| Valid Until | 2026-11-10T01:16:42+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
| Serial Number | 06BD95FABA593D1958507E2284A90D8B0F34 |
| Thumbprint | 4EDD19FE793E15B4750C5D548DB9C71C9852798D |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 13% | 1 | 1 |
| Overall | 24% | 9 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-28 16:13:49 UTC |
| Last Seen | 2026-08-12 22:35:27 UTC |
| Profile Built | 2026-08-12 22:52:33 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 28 |
Full dossier details are available via our API.