37.221.150.146📋 Copy

# INTELLIGENCE BRIEFING: 37.221.150.146/32

Classification: High Risk

Date: Current Assessment

Source: IPDebrief Threat Intelligence Platform

---

## EXECUTIVE SUMMARY

IP address 37.221.150.146 is classified as High Risk with a risk score of 80/100. The address is assigned to Radio Service Ltd. (ASN 62384) within the 37.221.144.0/20 CIDR block in Ukraine (Lviv region). No active services are detected on this address, and it is currently firewalled with no open ports. The IP is listed on 4 out of 8 DNSBLs and shows elevated operator activity.

---

## OWNERSHIP AND ATTRIBUTION

---

## GEOLOCATION INTELLIGENCE

*Note: Multiple geolocation sources confirm Ukraine attribution with high confidence.*

---

## THREAT INDICATORS

DNSBL Status: Listed on 4 of 8 threat feeds

Control Plane Status: Route stability inconsistent; operator score minimal (0.1304)

---

## NETWORK INFRASTRUCTURE

Assessment: Address is actively firewalled with no publicly accessible services.

---

## SUBNET ANALYSIS (37.221.150.0/24)

Notable High-Risk Neighbors:

• 37.221.150.177 (Risk: 80)
• 37.221.150.194 (Risk: 80)
• 37.221.150.58 (Risk: 55)
• 37.221.150.75 (Risk: 55)
• 37.221.150.196 (Risk: 55)

Inherited Risk Score: 5/100 (from subnet context)

---

## OBSERVATION HISTORY

13 signals recorded in observation history. Most recent activity: 2026-07-30

Key Historical Signals:

• Geolocation: Consistent Ukraine attribution across multiple probes
• Subnet Classification: "Mostly clean" with 13.64% abuse density
• Port Scanning: Multiple port scan attempts detected
• Service Probing: No successful service enumeration

Temporal Analysis:

• Ownership changes: 0
• Threat persistence days: 0
• Total incidents: 0
• Persistently malicious: No

---

## RELATIONSHIP GRAPH

*No external relationships identified (hostnames, certificates, or organizational links).*

---

## RECOMMENDED SECURITY ACTIONS

Immediate Recommendations

1. Increase logging verbosity and review recent activity from this IP

2. Block traffic at perimeter firewall

Firewall Implementation

iptables:

```bash

iptables -A INPUT -s 37.221.150.146 -j DROP

```

nftables:

```bash

nft add rule inet filter input ip saddr 37.221.150.146 drop

```

nginx:

```nginx

deny 37.221.150.146;

```

pfSense:

```

37.221.150.146/32

```

Cloudflare WAF:

```json

{

"description": "Block 37.221.150.146 — IPDebrief risk score 80",

"action": "block",

"filter": {

"expression": "ip.src eq 37.221.150.146"

}

}

```

AWS WAF:

```json

{

"Addresses": ["37.221.150.146/32"],

"Description": "IPDebrief risk 80"

}

```

---

## THREAT ASSE

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.