37.221.141.154📋 Copy

IP Intelligence Briefing: 37.221.141.154

Date: 2026-06-05

---

**1. Risk Assessment**

• Overall Risk Score: Moderate (55/100)
• Provider/Authority Scores: 0/100 (no authoritative threat indicators)
• Threat Indicators: No malicious activity detected (no blacklists, campaigns, or DNS anomalies).
• Network Stability: Firewalled with no open services (ports/services: empty).

---

**2. Ownership & Geolocation**

• Organization: Radio Service Ltd. (AS62384, RIPE)
• Geolocation:

- Country: Ukraine (UA)

- City: Lviv

- Coordinates: ~50.4522°N, 30.5287°E (approximate)

- Timezone: Europe/Kyiv

• Subnet: 37.221.141.154/24 (mixed risk density: 9% abuse).

---

**3. Threat & Network Behavior**

• Threat Observations:

- No spam, attacker, or Tor exit node indicators.

- No TLS certificates or HTTP services detected.

• Subnet Analysis:

- High-risk neighbors: 1 (e.g., 37.221.141.76, risk score 80).

- Medium-risk neighbors: 7 (e.g., 37.221.141.2, risk score 70).

- Low-risk neighbors: 3 (e.g., 37.221.141.158, risk score 0).

---

**4. Actionable Insights**

• Monitor Subnet: The IP’s /24 subnet contains high-risk neighbors (e.g., 37.221.141.76). Investigate potential lateral movement or shared infrastructure risks.
• Verify Ownership: Confirm Radio Service Ltd.’s legitimacy via RIPE/ADMDNS.
• Check for Misconfigurations: Ensure firewalled services are properly secured, as no open ports/services were detected.
• Track Geolocation: Cross-reference with other geolocation feeds to validate Ukraine-based origin.

---

Conclusion: This IP shows no direct malicious activity but resides in a subnet with mixed risk. SOC teams should prioritize monitoring neighboring IPs and verifying organizational legitimacy. No immediate mitigation required, but ongoing surveillance is recommended.

Tools Used: `ipdebrief_profile`, `ipdebrief_history`, `ipdebrief_relationships`, `ipdebrief_neighbors`.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.