15.235.96.39📋 Copy

IP Intelligence Briefing: 15.235.96.39

Date: 2026-06-09

---

**1. Reputation & Risk**

• Risk Score: 25 (Low Risk)
• Provider: OVH (ASN 16276)
• Organization: Ahrefs Pte Ltd (Hosting Provider)
• Geolocation: Singapore (CA), with ambiguous coordinates and timezone.

---

**2. Network & Ownership**

• CIDR Block: 15.235.96.0/24 (OVH subnet)
• Hosting Role: Identified as a hosting provider (not CDN, VPN, or Tor).
• Subnet Analysis:

- Abuse Density: 34.27% (mixed classification).

- Threat Siblings: 85 IPs in the subnet flagged as risky.

- Active Neighbors: 118 IPs (100% of subnet).

---

**3. Threat Indicators**

• No Malicious Activity: No indicators of spam, attacks, or known malicious campaigns.
• DNS Associations: Linked to `proxy-ca015-san39.ahrefs.net` (Ahrefs infrastructure).
• Historical Signals: Consistent low-risk observations over 5 months (no spikes).

---

**4. Security Actions**

• Recommended Actions: None (no actionable threats detected).
• Firewall Rules: Not required for this IP based on current risk profile.

---

**5. Observations & Analysis**

• Legitimate Hosting: Likely part of Ahrefs' infrastructure, given DNS and ownership data.
• Subnet Caution: While the IP itself is low-risk, the subnet has notable abuse density. Monitor for unusual activity.
• Geolocation Discrepancy: Geolocation data is sparse (no city/coordinates); verify with additional sources.

---

Next Steps:

• Monitor the subnet for changes in abuse density or new threats.
• Validate DNS associations with Ahrefs to confirm legitimate operations.
• Consider expanding monitoring if the subnet’s abuse density increases.

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.