# IP Intelligence Briefing: 37.128.204.129
## Executive Summary
IP address 37.128.204.129 presents a low-risk threat profile. The address is registered to the LV-VEESP network block under ASN 42532, located in Riga, Latvia. Current intelligence indicates no active malicious indicators, with a risk score of 30 and clean neighborhood classification. No immediate defensive actions are recommended based on available data.
## Network Profile
| Attribute | Value |
|---|---|
| **IP Address** | 37.128.204.129/32 |
| **Risk Score** | 30 (Low Risk) |
| **ASN** | 42532 |
| **Organization** | AZERONLINE-MNT |
| **Network Name** | LV-VEESP |
| **CIDR Block** | 37.128.204.0/22 |
| **RIR** | RIPE |
| **Country** | Latvia (LV) |
| **City** | Riga |
## Threat Indicators
- Blacklist Status: Not listed on any threat feeds (blacklist count: 0)
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Abuse Confidence Score: None recorded
- Campaign Association: None detected
## Network Role & Services
- Service Classification: Single-Service Host
- Open Ports: TCP/22 (SSH - OpenSSH_10.2p1 Ubuntu)
- DNS Records: No PTR hostnames, no forward resolution
- TLS Certificate: Not configured
- HTTP Services: None detected
## Neighborhood Analysis
| Metric | Value |
|---|---|
| Subnet | 37.128.204.129/24 |
| Abuse Density | 0% |
| Threat Siblings | 0 |
| Classification | Clean |
| Neighboring IPs | None identified |
## Historical Observation (Last 15 Days)
- Total Observations: 15
- Threat Persistence: None detected
- Ownership Changes: None
- Geolocation Consistency: Validated (plausible location, average RTT 141.6ms from probe location)
- Recent Classification: Clean subnet with zero inherited risk
## Control Plane Data
- BGP Prefix: 37.128.204.0/22
- Route Stability: Not stable
- RPKI State: Not evaluated
- DNSBL Listings: 2 out of 8 total lists (data present but no specific feed attribution)
## Recommended Actions
No specific firewall rules or security recommendations were generated based on the low-risk profile. Standard monitoring practices apply.
---
Analyst Notes: This IP exhibits characteristics consistent with legitimate infrastructure hosting services in Latvia. The single open SSH port without additional web services or TLS certificates suggests it may be a dedicated server or management endpoint. No threat intelligence correlations or campaign associations were identified.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | AZERONLINE-MNT |
| ASN | AS42532 |
| Network Name | LV-VEESP |
| CIDR Block | 37.128.204.0/22 |
| RIR | RIPE |
| Country | LV |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_10.2p1 Ubuntu-2ubuntu3.5 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 3 |
| routing | 46% | 3 | 4 |
| services | 19% | 2 | 2 |
| ownership | 35% | 3 | 4 |
| reputation | 18% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 28% | 13 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (65%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-28 04:03:10 UTC |
| Last Seen | 2026-08-09 04:43:09 UTC |
| Profile Built | 2026-08-08 22:36:12 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.