37.221.135.96📋 Copy

IP Intelligence Briefing: 37.221.135.96

Date: 2026-06-12

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Owner: Radio Service Ltd. (ASN 62384, RIPE)
• Geolocation: Lviv, Ukraine (UA)
• Network Role: Firewalled / No Services (no open ports, TLS, or HTTP detected)
• Threat Indicators:

- Listed in 4/8 DNSBLs (medium-severity listings).

- No known malicious campaigns, spam, or Tor activity.

---

**2. Observation History**

• Geolocation Inference: Confirmed as Ukraine (Lviv) with 52% confidence.
• DNSBL Listings: Detected in 4 out of 8 DNSBLs (e.g., Spamhaus, Barracuda).
• BGP Analysis: Stable route (37.221.128.0/20) with no recent changes.
• DNS: No PTR records found; DNSSEC valid.

---

**3. Relationships**

• Network: Part of RADIOSERVICE-201712 (RIPE) with 9 IPs in the same /24 subnet.
• Subnet Abuse Density: 0% (no high/medium-risk siblings).
• DNS: No associated domains or email auth records (SPF/DMArC).

---

**4. Neighborhood Analysis**

• Subnet: 37.221.135.96/24
• Neighbor Risk Distribution:

- 8 IPs with low/medium risk (avg. 40–55).

- 1 IP with moderate risk (70).

• Abuse Density: 0% (no malicious activity in subnet).

---

**5. Recommendations**

• Monitor DNSBL Listings: Investigate why this IP is listed in 4 DNSBLs (e.g., spam, phishing).
• Check Email Headers: Verify if the IP is used for email services with SPF/DMArC.
• Network Segmentation: Ensure firewalled subnets are isolated from internal networks.
• Subnet Surveillance: Track neighboring IPs for emerging threats.

Conclusion: The IP is owned by a Ukrainian entity with no active services but shows DNSBL listings. While the subnet is low-risk, the DNSBL presence warrants closer scrutiny to rule out abuse.

---

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.