15.235.98.23📋 Copy

IP Intelligence Briefing: 15.235.98.23/32

Date: 2026-06-17

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership: Registered to Ahrefs Pte Ltd (OVH ASN 16276) under subnet 15.235.98.0/24.
• Geolocation:

- Country: Canada (CA)

- City: Singapore (geo validation flagged as implausible due to RTT inconsistency).

• Network Role: Cloud compute infrastructure (OVH-hosted, no public services).
• Threat Indicators: No malicious activity detected (zero threat feeds, spam, or known attacker associations).

---

**2. Observation History (Last 20 Days)**

• Geolocation Consistency: Mixed signals (some probes show CA/Singapore, others unresolved).
• Network Stability: BGP route instability detected (route changes, low stability score).
• Subnet Abuse: Subnet 15.235.98.0/24 has 50.39% abuse density, with 129 threat-sibling IPs.

---

**3. Relationships & Context**

• Linked Entities:

- OVH-CUST-281059698 (same network).

- DNS: PTR hostname `proxy-ca019-san23.ahrefs.net` resolves to Ahrefs' domain.

- Certificates: No TLS certificates or HTTP services detected.

• Subnet Neighbors:

- 100 IPs in 15.235.98.0/24; 96 medium-risk, 4 low-risk.

- Inherited Risk: 20% due to subnet abuse density.

---

**4. Actionable Insights**

• No Direct Threat: No malware, spam, or attacker associations detected.
• Monitor Subnet: Elevated abuse density in the subnet warrants closer scrutiny for lateral movement or compromised hosts.
• Verify Geolocation: Investigate geo validation anomalies (RTT mismatch).
• Cloud Security: Ensure Ahrefs' cloud instance adheres to compliance standards, given OVH's hosting role.

---

Recommendation: Maintain standard monitoring for the subnet. No immediate mitigation required, but prioritize subnet-level threat hunting.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.