# 104.207.37.221 — IP Intelligence Summary 104.207.37.221 is an IPv4 address operated by lir-de-3xktechgmbh-1-MNT (AS200373), geolocated to Ashburn, Germany. As of October 9, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/104.207.37.221 - Last updated: 2026-10-09 ## Ownership - Organization: lir-de-3xktechgmbh-1-MNT - Network name: DE-3XKTECHGMBH-20140924 - Allocated block: 104.207.32.0/19 - ASN: AS200373 (https://ipdebrief.com/asn/200373) - Regional registry: ARIN ## Location - City: Ashburn - Region: Virginia - Country: Germany - Time zone: Europe/Berlin ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Exposed services - 22/tcp — ssh ## Analyst narrative \# INTELLIGENCE BRIEFING: 104.207.37.221/32 **Classification:** LOW RISK **Date:** 2026-07-18 **Analyst:** IPDebrief Intelligence Unit \--- \## EXECUTIVE SUMMARY IP 104.207.37.221 presents a **LOW RISK** threat profile with an overall risk score of 25. The address is associated with German infrastructure (ASN 200373, org: lir-de-3xktechgmbh-1-MNT) and demonstrates no active threat indicators. Network classification indicates "Firewalled / No Services" with no open ports detected. No defensive firewall rules required at this time. \--- \## RISK ASSESSMENT | Metric | Value | |--------|-------| | **Overall Risk Score** | 25 (Low Risk) | | **Provider Score** | 0 | | **Authority Score** | 0 | | **Stability Score** | 0 | | **Abuse Confidence** | Not reported | | **Blacklist Count** | 0 | | **Known Campaigns** | None | **Assessment:** The IP exhibits minimal risk characteristics. No known attacker, spam source, or Tor exit node indicators detected. Threat observation count remains at zero with no persistent malicious activity observed. \--- \## OWNERSHIP & NETWORK ATTRIBUTES \- **ASN:** 200373 \- **Organization:** lir-de-3xktechgmbh-1-MNT \- **Network Name:** DE-3XKTECHGMBH-20140924 \- **CIDR Block:** 104.207.32.0/19 \- **RIR:** ARIN \- **Abuse Contact:** Available via RDAP \--- \## GEOLOCATION INTELLIGENCE \- **Country:** Germany (DE) \- **Coordinates:** 51.17°N, 10.45°E \- **Timezone:** Europe/Berlin \- **Geo Validation:** Inconsistencies detected (geoPlausible: false) \- **DNSSEC:** Valid *Note: Geolocation data shows some validation anomalies. Coordinates indicate central Germany, though some metadata suggests alternative locations.* \--- \## NETWORK BEHAVIOR ANALYSIS | Category | Finding | |----------|---------| | **Open Ports** | None detected | | **TLS Certificates** | None | | **HTTP Services** | None | | **PTR Resolution** | None | | **Forward Resolution** | Not confirmed | | **Hosted Domains** | 0 | | **Email Auth** | No SPF/DMARC records | **Service Status:** Address is firewalled with no active services exposed. No TLS certificates, HTTP titles, or server banners detected. \--- \## THREAT INDICATORS \- **Tor Exit Node:** No \- **Known Attacker:** No \- **Spam Source:** No \- **Abuse Confidence Score:** Not applicable \- **Pulsedive Risk:** Not reported \- **Threat Feeds:** None \- **Campaign Correlation:** 0 \--- \## NEIGHBORHOOD ANALYSIS **Subnet:** 104.207.37.0/24 | Metric | Value | |--------|-------| | **Abuse Density** | 0 | | **Classification** | Clean | | **Total Siblings** | 3 | | **Active Siblings** | 0 | | **Threat Siblings** | 0 | | **High Risk Neighbors** | 0 | | **Medium Risk Neighbors** | 0 | | **Low Risk Neighbors** | 0 | **Neighbor IPs:** 104.207.37.79, 104.207.37.102 (risk scores not available) \--- \## OBSERVATION HISTORY **Total Observations:** 16 Recent signal observations (2026-07-18): \- Subnet classification: Clean (confidence: 0.40) \- Geolocation inference: Germany (confidence: 0.52) \- Ownership status: Stable, no changes detected (confidence: 0.85) \- RIR registration: ARIN (confidence: 0.90) \- Network registration data: Complete (confidence: 0.95) **Temporal Analysis:** \- Ownership changes: 0 \- Threat persistence days: 0 \- Threat observation count: 0 \- Persistently malicious: False \--- \## CONTROL PLANE METRICS \- **Origin ASN:** 200373 \- **BGP Prefix:** 104.207.37.0/24 \- **Route Stable:** False \- **RPKI State:** Not available \- **IRR Consistency:** Not available \- **Route Changes (30d):** 0 \- **DNSSEC Valid:** Yes \- **DNSBL Listed:** 1 of 8 total lists \- **Operator Score:** 0.1304 (Minimal) \--- \## RELATIONSHIP GRAPH **Connected Entities:** 3 All relationships map to the same network registration: DE-3XKTECHGMBH-20140924. No connections to external organizations, hostnames, or certificates detected. \--- \## RECOMMENDED ACTIONS **Current Risk Level:** LOW **Recommended Actions:** None required No firewall **RECOMMENDED ACTIONS** **Current Risk Level:** LOW **Recommended Actions:** None required No firewall rules, blocklists, or monitoring configurations recommended at this time. Standard baseline monitoring practices apply. Address does not match any known threat signatures or campaign indicators. **Monitoring Guidance:** Continue standard traffic observation. No immediate containment or investigation required. \--- \## TRACEROUTE ANALYSIS | Metric | Value | |--------|-------| | **Hop Count** | 15 | | **First Hop RTT** | 0.2ms | | **Last Hop RTT** | 35.7ms | | **Timed Out Hops** | 3 | | **Transit Networks** | Comcast | \--- \## FINGERPRINT ANALYSIS | Attribute | Status | |-----------|--------| | **Server Type** | Not detected | | **HTTP Status Code** | Not detected | | **HSTS** | No | | **CSP** | No | | **HTTP/2** | No | | **Favicon Hash** | None | | **Body Hash** | None | | **Powered By** | None | | **Generator** | None | | **TTFB** | Not measured | \--- \## EMAIL REPUTATION \- **Reputation:** Not applicable \- **Score Available:** No \- **Sender Score:** Not measured \--- \## CONCLUSION IP 104.207.37.221/32 presents a low-risk threat profile with no active malicious indicators. The address is associated with legitimate German infrastructure under organization lir-de-3xktechgmbh-1-MNT (ASN 200373). No open services, TLS certificates, or HTTP endpoints were detected. Network neighborhood analysis confirms clean status with zero abuse density and no threat siblings identified. **Status:** No action required. **Confidence:** High based on comprehensive signal analysis. **Next Review:** Standard periodic monitoring schedule applies. \--- **Report Generated:** 2026-07-18 **Intelligence Source:** IPDebrief Platform **Classification:** Defensive Intelligence Summary ## Nearby addresses - 104.207.37.79 (https://ipdebrief.com/104.207.37.79) - 104.207.37.102 (https://ipdebrief.com/104.207.37.102) --- Source: IPDebrief, "104.207.37.221 IP intelligence", https://ipdebrief.com/104.207.37.221, updated 2026-10-09. Assessments are probabilistic.