37.59.204.153📋 Copy

IP Intelligence Briefing: 37.59.204.153

Date: June 10, 2026

---

**1. Overview**

• Reputation: Moderate Risk (Risk Score: 40)
• Ownership: Registered to Ahrefs Pte Ltd (OVH ASN: 16276).
• Geolocation: France (FR), inferred via multi-signal geolocation with 500km accuracy radius.
• Network Role: Hosting provider (OVH), no public services detected.

---

**2. Threat Indicators**

• No direct malicious indicators: No known malware, spam, or attacker associations.
• Subnet Risk:

- Subnet 37.59.204.0/24 has high abuse density (0.7188), with 23/32 neighbors flagged as threats.

- Inherited risk: 28 (likely from malicious neighbors).

• DNS Associations: Linked to proxy-fr007-san153.ahrefs.net (Ahrefs infrastructure).

---

**3. Observation History**

• Stability: Subnet has no route stability (route changes in last 30 days).
• Activity Trends: No significant changes in risk scores or threat signals since June 1, 2026.
• Geolocation Consensus: Plausible (France), but no RTT or probe data available.

---

**4. Network Relationships**

• Key Associations:

- OVH network (282114232): Same subnet with high abuse density.

- DNS: Strong ties to Ahrefs' proxy hostname (proxy-fr007-san153.ahrefs.net).

• No external threats: No linked campaigns, blacklists, or Tor/VPN associations.

---

**5. Neighborhood Analysis**

• Subnet Summary:

- 32 IPs in 37.59.204.0/24, with 6 active and 23 flagged as threats.

- Risk distribution: 31 IPs scored medium risk (40–50), no high-risk IPs.

• Neighbor Examples:

- 37.59.204.128–159 show similar risk scores (40–50), suggesting potential compromised infrastructure.

---

**6. Recommendations**

• Monitor subnet: High abuse density in 37.59.204.0/24 warrants closer scrutiny for lateral movement or compromised hosts.
• Verify DNS: Confirm legitimacy of proxy-fr007-san153.ahrefs.net to ensure no DNS hijacking.
• Network Segmentation: Consider isolating this subnet if it hosts sensitive assets.
• Threat Hunting: Investigate if neighboring IPs (e.g., 37.59.204.128–159) are involved in broader attacks.

---

Source: IPDebrief Threat Intelligence Platform

Note: This IP is associated with a legitimate hosting provider, but its subnet exhibits high abuse activity. Proceed with caution.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.