37.187.5.192📋 Copy

IP Intelligence Briefing: 37.187.5.192

Date: 2026-06-15

---

**1. Risk Profile**

• Risk Score: 59 (Moderate Risk)
• Threat Indicators:

- Identified as a Tor exit node (high-risk association).

- Listed in 2 threat feeds (blacklist count: 1).

• Network Role: Tor Exit Node (provider: Octave Klaba).
• Geolocation: France (FR), plausible geolocation with 500km accuracy radius.

---

**2. Ownership & Infrastructure**

• ASN: 16276 (Octave Klaba).
• Network Type: Tor Exit Node (BGP prefix: `37.187.0.0/16`, AS path: `34549 16276`).
• Services:

- Open ports: HTTP (80), HTTPS (443).

- Server banner: nginx.

- TLS certificate: Self-signed, issuer `www.xjnd7zjtyeeg6g6qz7.com`.

---

**3. Threat Observations (Last 30 Days)**

• Active Signals:

- 2 threat feed listings (high/medium severity).

- DNS validation confirmed (DNSSEC valid, 5 probes).

• Stability:

- Route stability: Stable (no recent changes).

- Operator score: 0.4783 (Basic risk label).

---

**4. Relationships & Neighbors**

• Linked Entities:

- DNS hostname: `ns3126614.ip-37-187-5.eu` (OVH network).

- Subnet: `37.187.5.192/24` (abuse density: 0, no malicious neighbors).

• Network Context:

- No active siblings in subnet (neighbor count: 0).

---

**5. Recommendations**

1. Monitor Traffic:

- Block or monitor traffic originating from this Tor exit node, as it may be used for covert activities.

2. Inspect Services:

- Investigate the open HTTP/HTTPS services (nginx) for potential misuse.

3. Threat Feed Checks:

- Verify the IP against updated threat intelligence sources (2 listings identified).

---

Conclusion:

This IP is a Tor exit node with moderate risk, linked to OVH infrastructure. While geolocation and DNS validation are plausible, its Tor association and threat feed listings warrant closer monitoring. No immediate action is required unless traffic patterns align with malicious behavior.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.