37.67.206.149
# IP Intelligence Briefing: 37.67.206.149/32
## Executive Summary
IP address 37.67.206.149 is a French mobile infrastructure endpoint operated by SFR (Société Française du Radiotéléphone), classified as low-risk with a score of 25. The address is mobile-associated, geolocated to Valbonne, Provence-Alpes-Côte d'Azur region, and shows no active open services. The IP is listed on one DNSBL with high severity.
## Technical Profile
- Risk Score: 25 (Low Risk)
- ASN: 15557 (SFR)
- Organization: SFR Legal Contact
- Network: SFR-INFRA (37.67.200.0/21)
- Geolocation: France (FR), Provence-Alpes-Côte d'Azur, Valbonne
- Mobile Carrier: SFR (LTE/5G, MCC: 208, MNC: 10)
- PTR Record: 149.206.67.37.rev.sfr.net
- Status: Firewalled / No Services Detected
## Threat Indicators
- DNSBL Listings: 1 out of 8 total lists
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Operator Score: 0.2609 (Basic)
- Route Stability: Unstable (isRouteStable: false)
## Network Context
The IP resides in a clean subnet (37.67.206.149/24) with an abuse density of 0. Analysis of 1 neighboring IP (37.67.206.191) shows a medium risk score of 40 with authority score of 60. The subnet contains 2 total siblings with 0 active threat siblings.
## Historical Observations
Sixteen observations recorded as of July 24, 2026. Key observations include:
- Geolocation Signals: France, coordinates 46.23, 2.21, 500km accuracy radius
- Operator Classification: Basic (score 0.3)
- Threat Listings: 1 listing with high severity observed
- No Persistent Malicious Activity: Threat persistence days = 0
- Ownership Stability: No ownership changes recorded
## Relationship Graph
Six relationships identified:
- Same Network: SFR-INFRA (multiple entries)
- DNS Association: 149.206.67.37.rev.sfr.net (multiple entries)
## Recommended Actions
- Monitor: Maintain monitoring due to DNSBL listing with high severity
- No Block Required: Low-risk classification with no active threat indicators
- Mobile Traffic Context: Traffic may be misattributed due to mobile carrier infrastructure
## Assessment
This IP represents legitimate SFR mobile infrastructure with no evidence of active malicious use. The single DNSBL listing warrants awareness but does not indicate current compromise. The mobile carrier association explains the lack of open services and standard residential/mobile IP characteristics.
---
*Intel generated via IPDebrief on 2026-07-24*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | SFR Legal Contact |
| ASN | AS15557 |
| Network Name | SFR-INFRA |
| CIDR Block | 37.67.200.0/21 |
| RIR | RIPE |
| Country | FR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 149.206.67.37.rev.sfr.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 149.206.67.37.rev.sfr.net |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS15557 |
| Network Prefix | 37.64.0.0/13 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 25% | 1 | 1 |
| geolocation | 25% | 1 | 1 |
| Overall | 26% | 7 | 8 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 06:55:14 UTC |
| Last Seen | 2026-08-27 08:30:23 UTC |
| Profile Built | 2026-08-29 05:01:52 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 37.67.206.149
Who owns the IP address 37.67.206.149?
37.67.206.149 is registered to SFR Legal Contact. The address falls within the 37.67.200.0/21 network block. Registration is held at RIPE.
Where is 37.67.206.149 located?
Geolocation data places 37.67.206.149 in Valbonne, Provence-Alpes-Côte d'Azur, France. The local time zone is Europe/Paris. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 37.67.206.149 malicious or safe?
37.67.206.149 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 37.67.206.149?
The reverse DNS (PTR) record for 37.67.206.149 is 149.206.67.37.rev.sfr.net. This hostname is forward-confirmed, meaning it resolves back to the same address.
Is 37.67.206.149 a VPN, proxy, or data center address?
37.67.206.149 is classified as a mobile network based on network ownership and behavioural analysis.