92.222.108.112📋 Copy

# IP Intelligence Briefing: 92.222.108.112/32

Classification: Moderate Risk | Risk Score: 50/100 | Generated: 2026-06-24

---

## Executive Summary

IP address 92.222.108.112 operates within OVH cloud infrastructure in Paris, France (ASN 16276). The IP exhibits moderate risk (score 50) with evidence of DNSBL listings and operates in a high-abuse density subnet (92.222.108.0/24). No active threat indicators or known malicious campaigns were identified, but the subnet context warrants monitoring.

---

## Network Profile

---

## Threat Assessment

• Threat Indicators: None identified
• Tor Exit: No
• Known Attacker: No
• Spam Source: No
• DNSBL Listings: 2 of 8 total lists
• Campaign Association: None correlated

---

## Subnet Analysis (92.222.108.0/24)

• Abuse Density: 0.6774 (high_abuse classification)
• Total Subnet Siblings: 31 IPs
• Active Siblings: 27 IPs
• Threat Siblings: 21 IPs
• Inherited Risk Score: 27

The subnet demonstrates elevated abuse activity with approximately 68% of addresses showing threat indicators. This contextual risk elevates the relevance of the target IP despite individual score of 50.

---

## Historical Observation

• Observation Count: 24 signals
• Latest Activity: 2026-06-24 01:27 UTC
• Subnet Abuse Signal: 2026-06-19 (abuse_density 0.6774)
• Threat Persistence: 0 days (transient activity)

---

## Recommended Actions

Based on risk profile, the following controls are recommended:

```bash

# iptables

iptables -A INPUT -s 92.222.108.112 -j DROP

# nftables

nft add rule inet filter input ip saddr 92.222.108.112 drop

# nginx

deny 92.222.108.112;

# Cloudflare WAF

# Action: Block | Expression: ip.src eq 92.222.108.112

# AWS WAF

# Addresses: 92.222.108.112/32 | Description: IPDebrief risk 50

```

---

## Analysis Notes

• No active malicious campaigns or threat indicators detected on this specific IP
• DNSBL listings indicate prior abuse history; review for correlation with observed incidents
• Subnet-level abuse density suggests shared infrastructure risk; consider evaluating additional neighbors if lateral movement is suspected
• No open services detected; IP appears firewalled with no active services
• No correlation with known malicious campaigns or threat intelligence feeds

---

Status: Monitor | Priority: Medium | Action Required: Implement recommended firewall rules if applicable to traffic patterns

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.