37.110.211.46📋 Copy

## INTELLIGENCE BRIEFING: 37.110.211.46/32

Classification: Moderate Risk (Score: 55) | Last Updated: 2026-07-23

Organization: BEELINE-UZ-MNT (ASN: 41202) | Network: 37.110.208.0/22

Report Generated: SOC Intelligence Team

---

Executive Summary

IP 37.110.211.46 presents a moderate-risk profile (55/100) with minimal operational footprint. While the IP shows no active services and no known threat indicators, it maintains DNSBL listings on 3 of 8 commercial blocklists. Geographic validation failed (geoPlausible: false), and the IP is firewalled with no services exposed. The /24 subnet exhibits 33.3% abuse density, with one high-risk neighbor (37.110.211.11, Risk: 80).

---

Technical Profile

Ownership & Registration:

• ASN: 41202 | Org: BEELINE-UZ-MNT
• CIDR: 37.110.208.0/22 (RIR: RIPE)
• Abuse Contact: abuse@beeline.uz (available via RDAP)

Geolocation:

• Reported: Stockholm, SE | UZBEKISTAN (UZ)
• Validity: geoPlausible = FALSE (data conflict detected)
• Timezone: Europe/Stockholm (reported)

Network Classification:

• Services: Firewalled / No Services (no open ports)
• Infrastructure: Not CDN, Cloud, Proxy, or Tor exit
• DNS: No forward resolution, no PTR records, 0 hosted domains
• Email Auth: SPF/DMARC absent

Control Plane:

• Route Stability: FALSE (route changes observed)
• DNSSEC: Valid
• DNSBL: Listed on 3 of 8 total lists
• RPKI State: Null

---

Threat Assessment

Current Threat Indicators:

• Blacklist Count: 0 active indicators
• Known Attacker: NO
• Spam Source: NO
• Tor Exit Node: NO
• Known Campaigns: NONE

Behavioral Signals:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Persistent Malicious Activity: NO

Risk Breakdown:

• Provider Score: 0.00
• Authority Score: 0.00
• Stability Score: 0.00
• Abuse Confidence Score: NULL

---

Observation History (14 signals)

Recent observations indicate network stability with no ownership changes. The most recent subnet classification (2026-07-23) showed:

• Classification: CLEAN
• Abuse Density: 0.00
• Threat Persistence: NO
• Threat Observation Count: 0

---

Neighborhood Analysis (37.110.211.0/24)

Abuse Density: 33.3% (3 siblings)

Risk Distribution: 1 High, 1 Medium, 1 Low

Relationship Graph: 3 relationships to UZB-BEELINE-NET network entity.

---

Recommended Actions

Firewall Rules:

• Monitor traffic from 37.110.208.0/22 (subnet-level)
• Block 37.110.211.11 (high-risk neighbor)
• Rate-limit or log all traffic from 37.110.211.0/24

Monitoring Priorities:

1. Track DNSBL listing changes (currently 3/8 lists)

2. Monitor route stability (currently unstable)

3. Watch for service emergence on firewalled port range

4. Correlate with high-risk neighbor 37.110.211.11 activity

Threat Intel Notes:

• IP shows passive behavior (no open services detected)
• Geographic data conflicts require validation
• Subnet-level activity suggests coordinated infrastructure use
• Recommend ongoing monitoring for potential lateral movement or service pivoting

---

Analyst Notes: This IP appears to be part of a residential/mobile ISP infrastructure (BEELINE-UZ-MNT) with mixed risk profile across the subnet. The target IP itself is low-activity but sits in a neighborhood with elevated abuse density. Monitor for service activation or behavioral changes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.