104.207.42.163📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 104.207.42.163/32

Date: 2026-07-18

Classification: LOW RISK

## Executive Summary

IP 104.207.42.163 is a low-risk address (Risk Score: 25) with no active threat indicators. The IP belongs to a clean subnet with minimal abuse density and no observed malicious activity. No security blocking actions are recommended at this time.

## Ownership & Network Profile

• ASN: 200373 (lir-de-3xktechgmbh-1-MNT)
• Organization: lir-de-3xktechgmbh-1-MNT
• CIDR Block: 104.207.32.0/19
• Network Name: DE-3XKTECHGMBH-20140924
• RIR: ARIN
• Abuse Contact: Available via RDAP
• Abuse Email: friedrich.kraeft@3xktech.cloud

## Geolocation

• Country: Germany (DE)
• Region: Virginia
• City: Ashburn (reported) / Schorfheide (registration)
• Coordinates: 51.17, 10.45
• Timezone: Europe/Berlin
• Geo Confidence: 52%

## Threat Assessment

• Reputation: Low Risk
• Risk Score: 25/100
• Abuse Confidence: None recorded
• Blacklist Count: 0
• DNSBL Status: 1 listing (of 8 total lists)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No

## Network Behavior

• Infrastructure Type: Not identified
• Services: Firewalled / No Services (no open ports)
• DNS Resolution: Not confirmed
• PTR Hostnames: None
• HTTP Services: None observed

## Neighborhood Analysis (104.207.42.0/24)

• Subnet Classification: Clean
• Abuse Density: 0 (no abuse observed)
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Risk Distribution: None detected

## Historical Observations (16 records)

Recent observations indicate:

• Geolocation: Stable Germany assignment
• Ownership: No changes detected
• Threat Persistence: 0 days observed
• Classification: Consistently clean
• Abuse Density: 0 across all observations

## Relationships

• Network Associations: DE-3XKTECHGMBH-20140924 (same network)
• Hostnames/Certificates: None identified
• Correlated IPs: None detected

## Recommended Actions

No firewall blocking or security actions recommended. The IP exhibits no malicious indicators and is classified as low-risk. Standard network monitoring is sufficient.

## Analyst Notes

This IP represents a legitimate, non-threatening network endpoint. The absence of open services, combined with clean neighborhood metrics and historical stability, indicates routine infrastructure. Continue standard logging and monitoring without special attention.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.