37.202.236.238
# IP Intelligence Briefing: 37.202.236.238/32
## Executive Summary
IP address 37.202.236.238 presents a LOW RISK profile (Risk Score: 25/100) with no active threat indicators, no open services, and no abuse history. The IP is currently classified as "clean" with zero abuse density in its /24 subnet.
## Ownership & Network Classification
- Organization: Foad Jalali
- ASN: 213807 (RIPE NCC)
- Network Block: 37.202.236.0/22
- Network Name: TehranServer
- Abuse Contact: abuse@rasana.net
## Geolocation Assessment
Conflicting geolocation data detected:
- Primary classification: New York, US
- Historical signals indicate: Tehran, Iran
- Note: GeoConsensus = FALSE indicates unreliable location data; treat as unknown/ambiguous
## Threat Indicators
- Abuse Confidence Score: Not assigned
- Blacklist Count: 0
- DNSBL Listed: 1 of 8 total lists
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
## Network Services & DNS
- Open Ports: None detected (Firewalled / No Services)
- PTR Hostname: 37-202-236-238.shatel.ir
- Forward Resolution: Confirmed
- Email Authentication: SPF and DMARC records present
- HTTPS/TLS: No certificates detected
## Neighborhood Analysis
- Subnet: 37.202.236.238/24
- Abuse Density: 0 (Clean)
- Total Siblings: 1
- Threat Siblings: 0
- High Risk Neighbors: 0
## Relationship Graph
- Same Network: TehranServer (2 relationships)
- DNS Associations: 37-202-236-238.shatel.ir (3 relationships)
## Historical Observation (15 Signals)
- Ownership: Consistent (Foad Jalali, TehranServer)
- Classification: Persistently "clean"
- Abuse Density: Stable at 0
- Recent Activity: July 27, 2026 signals show no degradation in profile
## Recommended Actions
No immediate firewall or blocking actions recommended based on current risk profile. The IP demonstrates:
- Low risk score (25/100)
- No active threat indicators
- No open services or ports
- Clean subnet reputation
SOC Analyst Guidance: Monitor passively. No blocking required. Standard logging and observation sufficient.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Foad Jalali |
| ASN | AS31549 |
| Network Name | TehranServer |
| CIDR Block | 37.202.236.0/22 |
| RIR | RIPE |
| Country | IR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 37-202-236-238.shatel.ir |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 37-202-236-238.shatel.ir |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS31549 |
| Network Prefix | 37.202.224.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 20% | 2 | 3 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 12% | 2 | 2 |
| Overall | 14% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 21:06:55 UTC |
| Last Seen | 2026-09-29 03:08:03 UTC |
| Profile Built | 2026-09-28 08:55:14 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 37.202.236.238
Who owns the IP address 37.202.236.238?
37.202.236.238 is registered to Foad Jalali. The address falls within the 37.202.236.0/22 network block. Registration is held at RIPE.
Where is 37.202.236.238 located?
Geolocation data places 37.202.236.238 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 37.202.236.238 malicious or safe?
37.202.236.238 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 37.202.236.238?
The reverse DNS (PTR) record for 37.202.236.238 is 37-202-236-238.shatel.ir. This hostname is not forward-confirmed, so it should be treated as a weak signal.