37.221.147.249 is an IPv4 address operated by Radio Service Ltd. (AS62384), geolocated to Lviv, Ukraine. As of November 4, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected.
# IP Intelligence Briefing: 37.221.147.249/32
## Executive Summary
IP 37.221.147.249 is classified as Moderate Risk (55/100) and belongs to Radio Service Ltd. in Lviv, Ukraine. The IP is associated with a firewalled subnet with minimal active services, showing low threat persistence and no known campaign affiliations.
## Technical Profile
- Ownership: ASN 62384 (Radio Service Ltd.) | Netname: RADIOSERVICE-201801
- CIDR Block: 37.221.144.0/20 (RIPE Registry)
- Location: Lviv, Ukraine (UA)
- Network Role: Firewalled / No Services | Not a CDN, VPN, Proxy, or Tor Exit
- DNSBL Status: Listed on 3 of 8 monitored lists
## Risk Assessment
| Metric | Value |
|---|---|
| Risk Score | 55 (Moderate) |
| Abuse Confidence | Not applicable |
| Threat Indicators | None detected |
| Known Campaigns | None |
| Tor Exit Node | No |
| Known Attacker | No |
| Spam Source | No |
## Neighborhood Analysis (37.221.147.0/24)
- Subnet Classification: Mostly Clean
- Abuse Density: 0.042 (4.2%)
- Total Siblings: 25 IPs
- Threat Siblings: 2
- Risk Distribution: 1 High (score 80), 18 Medium, 5 Low
Notable Neighbor: 37.221.147.138 carries elevated risk (80/100) within the subnet.
## Temporal History
15 observations recorded. Recent signals confirm consistent ASN, geolocation, and ownership data with no escalation in threat activity. Route stability is flagged as false despite zero route changes in the last 30 days.
## Recommended Actions
1. Immediate: Increase logging verbosity and review recent traffic activity from this IP.
2. Firewall Rules:
- `iptables -A INPUT -s 37.221.147.249 -j DROP`
- `nft add rule inet filter input ip saddr 37.221.147.249 drop`
- `nginx: deny 37.221.147.249;`
3. Cloud/Proxy Providers: Configure blocking via Cloudflare WAF or AWS WAF using IP address 37.221.147.249/32.
## Intelligence Notes
- Subnet shows elevated medium-risk activity (18/25 neighbors scored 40/55)
- Single high-risk sibling (37.221.147.138) may warrant correlation analysis
- No evidence of malicious behavior from this specific IP; risk driven by subnet-level activity and DNSBL listings
- Monitoring recommended rather than immediate blocking; review recent connection logs for anomalous behavior
---
*Generated: 2026-07-27 | Data Source: IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Radio Service Ltd. |
| ASN | AS62384 |
| Network Name | RADIOSERVICE-201801 |
| CIDR Block | 37.221.144.0/20 |
| RIR | RIPE |
| Country | UA |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS62384 |
| Network Prefix | 37.221.144.0/20 |
| Route mapping | Found |
| RPKI Status | Unknown |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 5 |
| routing | 21% | 4 | 5 |
| services | 5% | 2 | 2 |
| ownership | 11% | 3 | 4 |
| reputation | 8% | 1 | 2 |
| geolocation | 10% | 2 | 3 |
| Overall | 14% | 14 | 21 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 14:59:17 UTC |
| Last Seen | 2026-11-07 06:49:12 UTC |
| Profile Built | 2026-11-04 23:23:30 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 32 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 37.221.147.249
Who owns the IP address 37.221.147.249?
37.221.147.249 is registered to Radio Service Ltd.. The address falls within the 37.221.144.0/20 network block. Registration is held at RIPE.
Where is 37.221.147.249 located?
Geolocation data places 37.221.147.249 in Lviv, 15, Ukraine. The local time zone is Europe/Kyiv. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 37.221.147.249 malicious or safe?
37.221.147.249 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.