15.235.27.83📋 Copy

IP Intelligence Briefing: 15.235.27.83

*Generated via IPDebrief Analysis*

---

**1. Core Profile**

• Risk Assessment:

- Risk Score: 25 (Low Risk)

- Provider Score: 0

- Authority Score: 0

- Stability Score: 0

• Ownership:

- ASN: AS16276 (OVH)

- Organization: Ahrefs Pte Ltd (OVH-CUST-281059692)

- Geolocation: Singapore (CA), with mixed geolocation data (some records indicate US).

• Threat Indicators:

- No malicious indicators, spam, or known attacker activity.

- DNS: Linked to `proxy-ca013-san83.ahrefs.net` (PTR record).

---

**2. Network Behavior**

• Hosting Role:

- Identified as a cloud compute resource (OVH infrastructure).

- No evidence of CDN,VPN, Tor, or residential traffic.

• Subnet Analysis:

- Subnet: `15.235.27.0/24`

- Abuse Density: 41.27% (moderate risk).

- Neighbor Risk: 104/252 IPs in subnet flagged as threats.

- Active Siblings: 107 IPs (32% of subnet).

---

**3. Historical Observations (Last 30 Days)**

• Persistent Classification:

- Consistently labeled as cloud hosting (OVH).

- Geolocation Variability: Mixed data (some records show US, others CA).

• Threat Trends:

- No escalation in threat signals.

- DNS Stability: Single PTR record (`proxy-ca013-san83.ahrefs.net`) observed.

---

**4. Relationships & Dependencies**

• Network Relationships:

- Same Network: Linked to OVH-CUST-281059692 (252 IPs).

- DNS Associations:

- Directly tied to `proxy-ca013-san83.ahrefs.net` (Ahrefs).

• Technical Context:

- TLS/Services: No open ports or TLS certificates detected.

- Email: No SPF/DKIM records or email-related threats.

---

**5. Recommendations**

• Monitoring:

- Track the `15.235.27.0/24` subnet for emerging threats due to 41% abuse density.

- Validate geolocation anomalies (CA vs. US records).

• Firewall:

- Consider allowing traffic only from trusted sources, given the hosting role.

- Monitor DNS queries to `proxy-ca013-san83.ahrefs.net` for unusual patterns.

---

Conclusion:

The IP is part of a low-risk OVH-hosted cloud infrastructure, likely used for Ahrefs services. While no direct malicious activity is detected, the subnet’s moderate abuse density and mixed geolocation data warrant further investigation. SOC teams should focus on subnet-level monitoring and validate DNS relationships.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.