37.187.118.2📋 Copy

# IP Intelligence Briefing: 37.187.118.2

Classification: LOW RISK — Cloud Infrastructure Host

Date: June 2026

Target: 37.187.118.2/32

---

## Executive Summary

IP 37.187.118.2 is a low-risk (risk score: 25/100) cloud computing resource hosted by OVH SAS in France. No active threat indicators detected. The IP resolves to a single public hostname and exposes SSH on port 22. Route instability observed; monitoring recommended.

---

## Infrastructure Profile

---

## Threat Intelligence

• Risk Score: 25/100 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Status: 0 blacklist hits; 1 DNSBL listing recorded
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

---

## Network Services & Open Ports

No HTTP/TLS services detected. Single-service host configuration.

---

## Temporal Analysis

• Total Observations: 24
• Threat Observation Count: 1
• Threat Persistence: 0 days (not persistently malicious)
• Route Stability: False (route changes detected)
• Ownership Changes: 0
• Last Significant Activity: June 15–20, 2026

Recent observations confirm consistent cloud hosting role with OVH provider attribution.

---

## Neighborhood Analysis

• Subnet: 37.187.118.2/24
• Classification: Mostly Clean
• Abuse Density: 1/255
• Active Siblings: 1
• Threat Siblings: 1
• Inherited Risk: 2

---

## Relationship Graph

• Total Relationships: 36
• Primary Associations:

- DNS: ns329877.ip-37-187-118.eu

- Network: OVH

• No certificate associations detected

---

## SOC Recommendations

1. Allow List: No immediate blocking required; low-risk profile with no active threat indicators.

2. Monitoring: Track route stability changes; IP shows inconsistent BGP prefix propagation.

3. Firewall Rules: SSH (22/tcp) access permitted per standard cloud configuration. No additional restrictions recommended.

4. DNSBL Watch: Monitor for additional blacklist listings despite current clean status.

5. Threat Correlation: Investigate the single observed threat signal in history to determine if it relates to the current IP or historical activity.

---

Confidence Level: High — Multiple data sources confirm cloud hosting role with consistent provider attribution.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.