37.114.151.120📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target IP: 37.114.151.120/32

Date: July 30, 2026

Classification: Moderate Risk

---

## EXECUTIVE SUMMARY

IP 37.114.151.120 is a moderate-risk (score: 40) Bulgarian residential IP assigned to SAZZNET (ASN 39232). The address shows minimal active threat indicators but demonstrates neighborhood-level abuse patterns with 33% subnet abuse density. No active services detected on the IP.

---

## OWNERSHIP AND GEOLOCATION

• ASN: 39232 (SAZZNET)
• Organization: Ramiz Nasirov
• Country: Bulgaria (BG)
• City: Sofia
• CIDR Block: 37.114.128.0/19
• Registration: RIR: RIPE

---

## THREAT PROFILE

• Risk Score: 40/100 (Moderate)
• Abuse Confidence: Not calculated
• Blacklist Status: Listed on 2 of 8 DNSBLs
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Proxy/Vpn: No

Threat Indicators: None detected. No known campaigns, no threat feeds matches, no correlated IPs.

---

## NETWORK CONTEXT

Subnet Analysis (37.114.151.0/24):

• Abuse Density: 33.33%
• Classification: mostly_clean
• Total Siblings: 3
• Active Siblings: 2
• Threat Siblings: 1

Neighboring IPs:

• 37.114.151.126 (Risk: 40, Authority: 50)
• 37.114.151.217 (Risk: 40, Authority: 50)

Network Role: Firewalled / No Services

• No open ports detected
• No TLS certificates or HTTP services

---

## OBSERVATION HISTORY

Total Observations: 17

Recent Activity: July 30, 2026

Key Signals:

• Geo location consistently reported as Sofia, BG (confidence: 0.7)
• Traceroute: 30 hops, 21 timeouts (transit via Comcast)
• ICMP validation issues (blocked)
• Ownership stability: No changes observed

---

## RELATIONSHIP GRAPH

• Network: SAZZNET (6 relationships)
• No hostname, organization, or certificate associations detected

---

## RECOMMENDED ACTIONS

Risk-Based Firewall Rules:

• iptables: `iptables -A INPUT -s 37.114.151.120 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 37.114.151.120 drop`
• nginx: `deny 37.114.151.120;`
• Cloudflare WAF: Block with expression `ip.src eq 37.114.151.120`
• AWS WAF: Add IP 37.114.151.120/32 to block list

Assessment: The IP carries moderate risk due to neighborhood abuse density. Consider blocking if internal policy requires threshold-based action at risk score 40+.

---

Generated by: IPDebrief Intelligence Platform

Analysis Status: Complete

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.