37.221.158.101📋 Copy

# IP Intelligence Briefing: 37.221.158.101/32

Classification: Moderate Risk

Date: Current Intelligence

Data Source: IPDebrief Intelligence Platform

---

## Executive Summary

IP address 37.221.158.101 is assigned to Radio Service Ltd. (ASN 62384) and is geolocated to Lviv, Ukraine. The IP carries a moderate risk score of 55/100 and is currently firewalled with no active services. While no direct threat indicators are present, the IP resides within a subnet exhibiting elevated abuse density (5.3%), with one high-risk neighbor (37.221.158.0, risk score 80). The IP is listed on three DNS blacklists out of eight total checks.

---

## Ownership and Network Context

---

## Risk Profile

---

## Neighborhood Analysis

Subnet: 37.221.158.0/24

Total Siblings: 25 IPs

Abuse Density: 5.3%

Risk Distribution:

• High Risk: 1 IP (37.221.158.0, score 80)
• Medium Risk: 16 IPs (scores 40–55)
• Low Risk: 2 IPs (scores 15)

Notable Neighbor: 37.221.158.0 exhibits a high risk score of 80 and authority score of 50, indicating potential abuse activity within the /24 block.

---

## Observation History

Nine observations recorded since monitoring began. Recent signals (as of July 30, 2026) show:

• Consistent geolocation to Ukraine
• Persistent ownership attribution to Radio Service Ltd.
• Stable operator classification (Minimal)
• No significant threat escalation or deescalation trends

---

## Relationships

The IP shows only internal network relationships (RADIOSERVICE-201801). No external associations with hostnames, certificates, or organizations beyond the network block were identified.

---

## Recommended Actions

Immediate:

• Monitor or block traffic from 37.221.158.101 due to elevated risk score (55/100) and neighborhood context

Firewall Rules:

```bash

# iptables

iptables -A INPUT -s 37.221.158.101 -j DROP

# nftables

nft add rule inet filter input ip saddr 37.221.158.101 drop

```

WAF/Cloud Rules:

• Cloudflare: Block IP with filter expression `ip.src eq 37.221.158.101`
• AWS WAF: Add 37.221.158.101/32 to block list

---

## Intelligence Notes

This IP presents a moderate risk profile primarily due to neighborhood association with known abuse activity. The subnet 37.221.158.0/24 shows a 5.3% abuse density, with one high-risk neighbor. Despite the target IP being firewalled and lacking active services, the contextual risk from the subnet warrants defensive measures. No active malicious campaigns or threat feeds correlate with this IP.

Recommendation: Implement blocking rules with monitoring for potential future activity from this IP and the surrounding /24 block.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.