# IP Intelligence Briefing: 115.129.97.137/32
Date: Current Analysis
Classification: Low Risk - Residential/ISP Infrastructure
Source: IPDebrief Intelligence Platform
---
## Executive Summary
IP 115.129.97.137 is classified as low-risk with a risk score of 20. The address is assigned to TPG Hostmaster (ASN 7545) as part of the TPG-AU network block (115.128.0.0/14). Geolocation indicates Melbourne, Australia, though RTT validation shows geolocation data inconsistencies. No active malicious indicators were detected during analysis.
---
## Network Profile & Ownership
| Attribute | Value |
|---|---|
| **ASN** | 7545 |
| **Organization** | TPG Hostmaster |
| **Netname** | TPG-AU |
| **CIDR Block** | 115.128.0.0/14 |
| **RIR** | APNIC |
| **Abuse Contact** | Available via RDAP |
The IP falls within a legitimate Australian ISP infrastructure block operated by TPG Communications. No provider or authority scores indicate elevated risk.
---
## Geolocation Assessment
| Parameter | Value | Status |
|---|---|---|
| **Country** | Australia (AU) | Confirmed |
| **Region** | Victoria | Confirmed |
| **City** | Melbourne | Reported |
| **Distance from Claimed Location** | 16,436.9 km | ⚠️ **Data Inconsistency** |
| **RTT** | 257.0 ms | ⚠️ **Below Minimum Possible** (328.7 ms) |
| **Probe Count** | 5 | Validated |
Note: RTT measurements indicate a geolocation validation violation. The observed RTT of 257ms is below the minimum physically possible RTT (328.7ms) for the claimed distance of 16,437km, suggesting the geolocation data may be inferred rather than verified through direct probing.
---
## Threat Indicators
| Indicator | Status |
|---|---|
| **Abuse Confidence Score** | Not applicable |
| **Known Attacker** | No |
| **Tor Exit Node** | No |
| **Spam Source** | No |
| **Blacklist Count** | 0 |
| **Known Campaigns** | None |
| **Threat Feeds** | None |
No threat indicators were identified. The IP does not appear in any major threat feeds or known attacker databases.
---
## Network Role & Services
| Attribute | Value |
|---|---|
| **Service Purpose** | Firewalled / No Services |
| **Open Ports** | None detected |
| **TLS Certificate** | None |
| **HTTP Banner** | None |
| **Is Cloud** | No |
| **Is CDN** | No |
| **Is VPN** | No |
| **Is Proxy** | No |
| **Is Hosting** | No |
| **Is Residential** | No |
| **Is Mobile** | No |
The IP is firewalled with no active services exposed, consistent with residential or infrastructure endpoint behavior.
---
## DNS Analysis
| Attribute | Value |
|---|---|
| **PTR Hostname** | 115-129-97-137.tpgi.com.au |
| **Forward Resolution** | 115-129-97-137.tpgi.com.au |
| **Forward Confirmed** | No |
| **Hosted Domains** | None |
| **SPF Record** | None |
| **DMARC Record** | None |
DNS records indicate standard TPG home broadband reverse DNS. No email authentication records configured.
---
## Neighborhood Analysis
| Metric | Value |
|---|---|
| **Subnet** | 115.129.97.0/24 |
| **Abuse Density** | 0 |
| **Classification** | Clean |
| **Total Siblings** | 1 |
| **Active Siblings** | 1 |
| **Threat Siblings** | 0 |
| **High Risk Neighbors** | 0 |
| **Medium Risk Neighbors** | 0 |
The /24 subnet shows no abuse density with zero threat siblings, indicating this IP operates in a clean network environment.
---
## Observation History
Analysis of 18 signal observations reveals:
- Recent Classification: Clean subnet classification
- Abuse Density: 0 across all observations
- Ownership Changes: 0
- Threat Persistence: 0 days
- Threat Observation Count: 0
The IP has maintained a clean classification throughout observed history with no escalation in risk signals.
---
## Control Plane Data
| Metric | Value |
|---|---|
| **BGP Prefix** | 115.129.96.0/21 |
| **Route Stability** | Unstable |
| **DNSSEC Valid** | Yes |
| **DNSBL Listed** | 1 of 8 lists |
| **Operator Score** | 0.1304 (Minimal) |
| **IRR Consistency** | Not available |
---
## Relationships
Nine relationships identified:
- Same Network (4x): TPG-AU
- DNS Association (5x): 115-129-97-137.tpgi.com.au
All relationships point to legitimate TPG infrastructure and standard reverse DNS records.
---
## Recommended Security Actions
Current Risk Level: Low (Score: 20)
| Action | Recommendation |
|---|---|
| **Firewall Rules** | No immediate action required |
| **Threat Hunting** | Low priority |
| **Monitoring** | Standard baseline monitoring sufficient |
| **Block List** | Not recommended |
Note: Recommendations are probabilistic and should be combined with other intelligence signals before implementing blocking actions.
---
## Intelligence Assessment
IP 115.129.97.137 presents a low-risk profile consistent with Australian residential ISP infrastructure. Key observations:
1. Legitimate Infrastructure: Assigned to TPG Hostmaster (AS7545), a legitimate Australian ISP
2. Clean Neighborhood: Zero abuse density in the /24 subnet
3. No Malicious Indicators: Absence from threat feeds, blacklists, and known attacker databases
4. Residential Behavior: Firewalled with no services exposed
5. Stable History: 18 observations showing consistent clean classification
Threat Level: LOW
Recommended Action: No action required. Monitor as part of standard baseline traffic analysis.
---
*Report generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | TPG Hostmaster |
| ASN | AS7545 |
| Network Name | TPG-AU |
| CIDR Block | 115.128.0.0/14 |
| RIR | APNIC |
| Country | AU |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 115-129-97-137.tpgi.com.au |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 115-129-97-137.tpgi.com.au |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS7545 |
| Network Prefix | 115.129.96.0/21 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-14 03:39:20 UTC |
| Last Seen | 2026-07-27 13:08:22 UTC |
| Profile Built | 2026-08-30 17:57:34 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 115.129.97.137
Who owns the IP address 115.129.97.137?
115.129.97.137 is registered to TPG Hostmaster. The address falls within the 115.128.0.0/14 network block. Registration is held at APNIC.
Where is 115.129.97.137 located?
Geolocation data places 115.129.97.137 in Melbourne, Victoria, Australia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 115.129.97.137 malicious or safe?
115.129.97.137 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 115.129.97.137?
The reverse DNS (PTR) record for 115.129.97.137 is 115-129-97-137.tpgi.com.au. This hostname is not forward-confirmed, so it should be treated as a weak signal.