15.235.27.223📋 Copy

# IP Intelligence Briefing: 15.235.27.223/32

## Executive Summary

IP 15.235.27.223 presents moderate risk (score: 40) associated with OVH cloud infrastructure. The address resolves to Ahrefs Pte Ltd customer network and exhibits characteristics consistent with legitimate cloud hosting operations. However, the parent subnet demonstrates elevated abuse density requiring contextual monitoring.

## Risk Assessment

## Infrastructure Profile

• Organization: Dmytro, Ahrefs Pte Ltd
• ASN: 16276 (OVH)
• Netblock: 15.235.27.0/24
• Infrastructure Type: CloudCompute
• Connection State: Firewalled / No Services Detected
• Cloud Provider: OVH (confirmed)

## DNS Intelligence

• PTR Record: proxy-ca013-san223.ahrefs.net
• Forward Resolution: proxy-ca013-san223.ahrefs.net
• Domain: ahrefs.net
• HTTP/HTTPS: No active services detected
• TLS Certificates: None observed

## Geographic Data

• Consensus Location: Singapore (CA)
• Accuracy Radius: 3000 km
• Geo Consensus: Validated across multiple sources

## Neighborhood Analysis

Subnet: 15.235.27.0/24

The parent subnet exhibits elevated abuse activity with 71% abuse density. This contextualizes the moderate risk score for the target IP as part of a broader high-abuse environment.

## Threat Indicators

• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Correlation: None detected
• Cert Matches: 0

## Historical Observation

19 observations recorded over monitoring period. Consistent classification as cloud hosting infrastructure with stable provider attribution (OVH). No significant reputation degradation or escalation in threat indicators observed.

## Recommended Actions

Block List: Add 15.235.27.223/32 to deny rulesets

Firewall Rules:

```bash

# iptables

iptables -A INPUT -s 15.235.27.223 -j DROP

# nftables

nft add rule inet filter input ip saddr 15.235.27.223 drop

# nginx

deny 15.235.27.223;

# Cloudflare WAF

{"description":"Block 15.235.27.223 — IPDebrief risk score 40","action":"block","filter":{"expression":"ip.src eq 15.235.27.223"}}

# AWS WAF

{"Addresses":["15.235.27.223/32"],"Description":"IPDebrief risk 40"}

```

## Intelligence Context

This IP represents legitimate cloud infrastructure (OVH/Ahrefs) operating within a high-abuse subnet environment. The moderate risk score reflects subnet-level contamination rather than individual IP malicious activity. Monitor for behavioral changes correlating with neighborhood abuse patterns.

---

*Report generated: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.