92.222.230.165📋 Copy

# IP INTELLIGENCE BRIEFING: 92.222.230.165/32

Classification: Moderate Risk (Score: 50) | Timestamp: 2026-06-28 | Status: Active

## EXECUTIVE SUMMARY

IP address 92.222.230.165 is a cloud hosting VPS instance operated by OVH SAS in Paris, France. The IP presents moderate risk (score 50/100) with limited threat indicators. No active malicious campaigns, open services, or known attacker signatures detected. Recommended for monitoring rather than immediate blocking.

## OWNERSHIP AND INFRASTRUCTURE

• ASN: 16276 (OVH SAS)
• Location: Paris, Île-de-France, France (FR)
• Infrastructure Type: CloudCompute (VPS)
• CIDR Block: 92.222.0.0/16
• DNS Resolution: vps-baf9b08d.vps.ovh.net (Forward confirmed)
• Email Authentication: SPF and DMARC records present

## THREAT INDICATORS

• Blacklist Status: Listed on 1 of 8 DNSBLs
• Threat Reputation: No known attacker campaigns
• Tor Exit Node: No
• Proxy/VPN: No
• C2 Activity: None detected
• Known Bad IPs: False

## NETWORK CLASSIFICATION

• Role: Hosting Provider (VPS)
• Services: No open ports detected; service classified as "Firewalled / No Services"
• Connection Type: Cloud infrastructure
• Mobile/Residential: False

## GEOLOCATION VALIDATION

• Coordinates: 46.23°N, 2.21°E (Paris region)
• Accuracy Radius: 500km
• Consensus: True (multi-source)

## NEIGHBORHOOD ANALYSIS (92.222.230.0/24)

• Abuse Density: 0 (clean)
• Classification: Mostly clean
• Active Siblings: 1
• Threat Siblings: 1
• Inherited Risk: 2/100

## OBSERVATION HISTORY

• Total Observations: 25 signals
• Last Observed: 2026-06-28
• Threat Persistence: 0 days
• Ownership Changes: 0
• Status: Not persistently malicious

## RELATIONSHIP GRAPH

• DNS Associations: vps-baf9b08d.vps.ovh.net (multiple entries)
• Network Associations: VPS-EU-WEST-RBX-VPS-1
• Total Relationships: 49

## RECOMMENDED ACTIONS

Based on risk score 50 and moderate classification:

1. Monitor rather than block (risk score below 60 threshold)

2. Log all traffic for forensic analysis

3. Block only if additional indicators present (no current evidence)

Firewall Rules (if blocking required):

```bash

iptables -A INPUT -s 92.222.230.165 -j DROP

nft add rule inet filter input ip saddr 92.222.230.165 drop

```

## SOC ANALYST NOTES

This IP represents a legitimate OVH VPS instance with no active malicious behavior. The moderate risk score stems from DNSBL listing rather than confirmed threats. Standard logging and monitoring recommended; immediate blocking not warranted without additional corroborating indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.