37.221.143.236📋 Copy

IP Intelligence Briefing: 37.221.143.236

Risk Assessment: Moderate Risk (Risk Score: 55) | Subnet Abuse Density: 18.18% (mostly clean)

Ownership & Geolocation:

• ASN: 62384 (Radio Service Ltd., Ukraine)
• Location: Nyzhnia Rozhanka, Ukraine (UA) | Geo-Plausibility: False
• Network Role: Firewalled / No Services | No CDN/VPN/Hosting detected

Threat Indicators:

• DNSBL Listings: 3/8 total lists (high-severity risk)
• Observation History:

- 18 signals recorded (last 30 days)

- Subnet abuse density increased from 0.071 to 0.1818

- 2 high-risk neighbors (e.g., 37.221.143.0, risk score 80)

Relationships:

• Linked to network RADIOSERVICE-201712 (ASN 62384)
• No correlated campaigns or TLS certificates detected

Network Neighborhood:

• Subnet: 37.221.143.236/24
• Active Siblings: 3 | Threat Siblings: 2
• Notable neighbors:

- 37.221.143.0 (risk 80)

- 37.221.143.137 (risk 70)

- 37.221.143.192 (risk 70)

Recommendations:

1. Monitor Subnet: High-risk neighbors suggest increased scrutiny of the 37.221.128.0/20 prefix.

2. Firewall Rules: Block traffic from 37.221.143.0/24 using iptables/nftables to mitigate subnet-level risks.

3. DNSBL Checks: Validate DNSBL listings (e.g., Spamhaus, Barracuda) for potential spam or malware activity.

4. Geolocation Verification: Investigate discrepancies in geo-plausibility (48.38°N, 31.17°E).

Next Steps:

• Cross-reference with internal threat feeds for known malicious activity.
• Validate ownership via RDAP and check for ASN abuse patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.