15.235.80.141📋 Copy

# IP Intelligence Briefing: 15.235.80.141

Date: 2026-06-21

Risk Level: LOW (Score: 25/100)

---

## Executive Summary

IP address 15.235.80.141 is a low-risk residential cloud compute endpoint hosted by OVH Hosting, Inc. in Montreal, Canada. The address demonstrates no active threat indicators and is currently classified as "Firewalled / No Services." No immediate defensive action is required, though monitoring is recommended for the associated /24 subnet due to one threat sibling neighbor.

---

## Ownership and Infrastructure

The IP resides within OVH's cloud hosting infrastructure, specifically assigned to a residential/infrastructure network segment. The address is classified as a cloud-based hosting endpoint with no public-facing services currently exposed.

---

## Technical Profile

Network Classification

• Provider: OVH Hosting
• Connection Type: Cloud
• Service Purpose: Firewalled / No Services
• DNS Resolution: Forward confirmed
• PTR Record: ns5014235.ip-15-235-80.net

Service Exposure

• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• Reverse DNS: Resolved to OVH hostname

DNS Security

• SPF Record: Present
• DMARC Record: Absent
• DNSSEC: Valid
• Hosted Domains: None

---

## Threat Assessment

Risk Indicators

• Risk Score: 25 (Low)
• Blacklist Count: 0
• DNSBL Lists: 1 of 8 total lists
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Threat Feeds: None

Behavioral Signals

• Ownership Changes: 0
• Threat Persistence: 0 days
• Threat Observation Count: 1
• Persistently Malicious: No

Control Plane

• BGP Prefix: 15.235.0.0/17
• Route Stability: Unstable
• RPKI State: Unknown
• Operator Score: 0.2609 (Basic)
• DNSSEC Valid: True

---

## Neighborhood Analysis

The /24 subnet shows minimal abuse density (1). One sibling IP within the range has been flagged as a threat, suggesting potential neighborhood-level activity. However, the target IP itself shows no inherited malicious behavior.

---

## Relationship Graph

The IP maintains 24 relationship entries, primarily:

• 22 Same Network relationships to SD-BHS8-B809B-3EME-MAGGIE-INFRA-002
• 2 DNS Association relationships to ns5014235.ip-15-235-80.net

No organizational or certificate-based relationships detected. The IP exists primarily as an infrastructure node within OVH's network topology.

---

## Historical Signals

Total Observations: 19

Latest Signal: 2026-06-21

Recent signal history shows:

• Subnet classification (mostly_clean, abuse density: 1)
• Ownership stability (0 changes)
• Threat list status (not listed)
• Geolocation signals (Canada, confidence: 0.35)
• Operator scoring (Basic, score: 0.2609)

No evidence of escalating risk or persistent malicious behavior over the observation period.

---

## Recommended Actions

Firewall Rules

No specific firewall rules recommended at this time. Risk score of 25 falls below typical blocking thresholds.

Monitoring Recommendations

• Monitor the /24 subnet (15.235.80.0/24) due to one threat sibling
• Track DNS resolution patterns for ns5014235.ip-15-235-80.net
• Reassess if the IP begins exhibiting open ports or service exposure

Mitigation Priority

LOW - No immediate action required. The IP demonstrates low-risk characteristics consistent with legitimate cloud hosting infrastructure.

---

Status: ACTIVE MONITORING

Classification: Cloud Infrastructure / Low Risk

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.