15.235.98.192📋 Copy

IP Intelligence Briefing: 15.235.98.192/32

*Generated via IPDebrief Network Intelligence Platform*

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership:

- ASN: 16276 (OVH)

- Organization: Ahrefs Pte Ltd

- Network: 15.235.98.0/24

• Geolocation:

- Country: Canada (CA)

- City: Singapore (discrepancy noted; geolocation plausibility flagged)

- Coordinates: Latitude 56.13, Longitude -106.35 (3000km accuracy radius)

• Threat Indicators:

- No malicious indicators, blacklists, or campaigns detected.

- DNS: Resolves to `proxy-ca019-san192.ahrefs.net` (no email auth records).

• Network Role:

- Cloud Compute: Hosted by OVH, likely a virtualized server.

- Services: No open ports or TLS certificates detected.

---

**2. Observation History (30-Day Trend)**

• Stability: No significant changes in risk or geolocation signals.
• Key Trends:

- Subnet abuse density remains stable at 0.5 (high risk).

- Geolocation anomalies persist (e.g., 6082km distance vs. 27ms RTT).

- No spikes in threat activity or DNS anomalies.

---

**3. Network Relationships**

• Linked Entities:

- OVH-CUST-281059698 (same network subnet).

- Ahrefs Pte Ltd (organization).

• Subnet Context:

- 15.235.98.0/24: 256 IPs, 129 flagged as high-risk.

- Abuse Density: 50.39% (high-risk subnet).

- Neighbor Risk: 20 inherited risk score from subnet.

---

**4. Neighborhood Analysis**

• Subnet Summary:

- Total IPs: 256 (15.235.98.0/24).

- Active IPs: 215 (84% utilization).

- Threat IPs: 129 (50.39% abuse density).

• Notable Neighbors:

- 15.235.98.0/24: Mixed risk scores (40–50).

- High-Risk Neighbors: 96 IPs with medium risk, 4 with low risk.

---

**5. Actionable Insights**

• SOC Recommendations:

- Monitor Subnet: High abuse density suggests potential lateral movement or botnet activity.

- Investigate Geolocation Anomalies: Discrepancy between Canada (CA) and Singapore may indicate spoofing or misconfigured infrastructure.

- Block Neighbor IPs: Consider isolating high-risk neighbors (e.g., 15.235.98.0–15.235.98.4) if they correlate with suspicious activity.

- Verify Cloud Provider: Confirm OVH-hosted infrastructure compliance with security best practices.

• Threat Context:

- No direct malicious indicators, but subnet-level risks warrant closer scrutiny.

- Ahrefs Pte Ltd’s infrastructure may require additional validation for potential misuse.

---

*Data sourced from IPDebrief intelligence tools. Use with SOC team for real-time threat prioritization.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.