15.235.27.48📋 Copy

IP Intelligence Briefing: 15.235.27.48

Date: 2026-06-02

---

**1. Risk Profile**

• Risk Score: 25 (Low Risk)
• Provider: OVH (ASN 16276)
• Organization: Ahrefs Pte Ltd (OVH-CUST-281059692)
• Geolocation: Singapore (CA), but geo-plausibility flagged due to RTT discrepancy (observed 27ms vs. expected 121.6ms for 6082km).
• Network Role: Cloud compute instance (OVH hosting).

---

**2. Threat Indicators**

• No malicious activity detected (no indicators, abuse confidence score, or blacklist entries).
• DNS: Resolves to `proxy-ca013-san48.ahrefs.net` (Ahrefs infrastructure).
• Services: No open ports, TLS, or HTTP services detected.

---

**3. Network Context**

• Subnet: 15.235.27.48/24
• Subnet Risk: Mixed (abuse density 49.01%), with 70% of neighbors classified as medium-risk and 30% low-risk.
• Inherited Risk: 19 (moderate).
• Active Siblings: 140 IPs in the subnet (253 total).

---

**4. Historical Observations**

• First Seen: 2026-06-02
• Signals:

- Single threat observation (no persistence).

- Stability score: 0 (unstable).

- No repeated malicious activity.

---

**5. Relationships**

• Linked to OVH network (OVH-CUST-281059692).
• No direct connections to known malicious entities, campaigns, or Tor networks.

---

**6. Security Recommendations**

• Monitor Subnet: The /24 subnet has a moderate abuse density; investigate high-risk neighbors (70% medium-risk).
• Verify Geolocation: Discrepancy between reported location (Singapore) and RTT suggests potential spoofing or misconfiguration.
• Cloud Security: Ensure Ahrefs' cloud instance (OVH) is configured with proper firewall rules and access controls.
• No Immediate Action Required: Low-risk IP with no active threats, but ongoing monitoring is advised.

---

Source: IPDebrief Threat Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.