92.222.108.115📋 Copy

# IP Intelligence Briefing: 92.222.108.115

## Executive Summary

IP 92.222.108.115 is classified as Moderate Risk (Score: 40). The address resolves to legitimate Ahrefs infrastructure (OVH Cloud, ASN 16276) but operates within a subnet exhibiting elevated abuse characteristics. No direct threat indicators were identified for this specific address.

## Ownership and Infrastructure

• Provider: OVH (ASN 16276)
• Organization: Ahrefs Pte Ltd Dmytro
• Geolocation: Paris, France (IDF Region)
• Infrastructure Type: CloudCompute / Hosting Environment
• DNS Resolution: proxy-fr002-san115.ahrefs.net
• Services: None detected (Firewalled / No Services)
• Network Classification: Cloud infrastructure with hosting capabilities

## Threat Assessment

• Risk Score: 40 (Moderate)
• Abuse Confidence Score: Not calculated
• Known Threats: None identified
• Blacklist Status: 0 listings
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False

The IP shows no direct threat indicators. However, the subnet context presents elevated risk considerations.

## Subnet Analysis (92.222.108.0/24)

• Abuse Density: 0.7419 (High Abuse Classification)
• Total Siblings: 31
• Active Siblings: 26
• Threat Siblings: 23
• Risk Distribution: 30 medium-risk IPs, 0 high-risk, 0 low-risk

The /24 subnet demonstrates significant abuse presence with 23 of 31 siblings flagged as threats. This contextual risk factor warrants monitoring.

## Temporal Analysis

• Total Observations: 23
• Observation Period: June 14–19, 2026
• Operator Score: 0.2174 (Minimal)
• Threat Persistence: 0 days
• Ownership Changes: 0

Signal observations indicate stable ownership with no recent threat emergence. Geolocation validation confirms Paris coordinates with RTT metrics consistent with European location (avg RTT: 98.2ms).

## Network Relationships

• Primary Network: OVH_282114227
• Total Relationships: 58
• Route Stability: Unstable (isRouteStable: false)
• RPKI State: Not validated
• BGP Prefix: 92.222.0.0/16

## Recommended Actions

Immediate Mitigation

Firewall rules are recommended due to moderate risk score and subnet context:

Monitoring Recommendations

1. Monitor subnet 92.222.108.0/24 for lateral threat activity

2. Track correlation with other Ahrefs infrastructure

3. Review incoming traffic patterns for the subnet

4. Re-evaluate if threat indicators emerge on sibling IPs

## Intelligence Conclusion

92.222.108.115 presents moderate risk primarily due to subnet abuse density rather than direct malicious activity. The IP belongs to legitimate Ahrefs infrastructure but shares hosting environment with 23 threat-sibling IPs. SOC analysts should apply blocking rules as precautionary measure while monitoring for changes in threat posture. No immediate threat indicators detected for this specific address.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.