37.236.213.14📋 Copy

# IP Intelligence Briefing: 37.236.213.14/32

Classification: Low Risk | Date: 2026-07-24

## Executive Summary

IP 37.236.213.14 presents a low-risk profile with no active threat indicators. The address is currently firewalled with no open services detected. However, recent observation data indicates 8 blacklist listings including one high-severity entry, warranting continued monitoring despite the overall low-risk classification.

## Technical Profile

Network Ownership

• ASN: Not reported (profile ASN: null; history ASN: 203214)
• Organization: ae-earthlink-dmcc-1-mnt
• Network Name: BROADBAND-SUBSCRIBERS-POOL
• CIDR Block: 37.236.0.0/15
• RIR: RIPE
• Registration: Historical data indicates allocation on 2012-04-13

Geolocation Discrepancies

• Primary Profile: United States, New Jersey, Newark (US-NJ)
• Historical ASN Data: Iraq (IQ) via ASN 203214
• Accuracy: GeoPlausible validation failed; single geo-source consensus

Network Services

• Open Ports: None
• DNS Records: None detected
• PTR Resolution: Not configured
• TLS/HTTP Services: None detected
• Service Purpose: Firewalled / No Services

Threat Indicators

• Abuse Confidence Score: Not calculated
• Blacklist Count: 0 (profile) vs 8 total listings (history)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None associated

## Risk Assessment

Overall Risk Score: 0 (Low Risk)

Provider Score: 0

Authority Score: 0

Stability Score: 0

The IP demonstrates no persistent malicious behavior. Historical threat persistence days: 0. Not classified as persistently malicious.

## Neighborhood Analysis

Subnet: 37.236.213.0/24

• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0
• Classification: Not determined

The /24 subnet shows no elevated abuse activity, suggesting this IP operates in isolation.

## Observation History (Last 10 Observations)

Recent Signals (2026-07-24):

• DNSSEC: Validated (true)
• ASN Resolution: 203214, HulumTele (IQ) via team-cymru-dns
• PTR Record: None
• Blacklist Listings: 8 total (1 high-severity)
• Operator Score: 0

Behavioral Indicators:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0

## Control Plane Data

• Origin ASN: Not resolved
• BGP Prefix: Not resolved
• RPKI State: Not reported
• Route Stability: False
• Route Changes (30d): 0
• DNSSEC Valid: False
• DNSBL Listed Count: 0

## Recommended Actions

No immediate security actions recommended based on current risk profile (risk score: 0). Standard monitoring protocols apply.

Monitoring Considerations:

• The 8 blacklist listings with one high-severity entry warrant periodic re-validation
• Geolocation inconsistencies (US vs IQ) suggest complex routing; monitor for changes
• Continue observation if this IP appears in incident traffic

## Related Entities

Relationships Detected: 1

• Same Network: BROADBAND-SUBSCRIBERS-POOL

Certificates: None

Campaign Correlations: None

---

*Intelligence generated by IPDebrief. Data reflects observations as of 2026-07-24. SOC analysts should correlate with internal threat data and maintain standard monitoring procedures for this address.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.