209.50.184.121
209.50.184.121 is an IPv4 address operated by lir-de-3xktechgmbh-1-MNT (AS200373), geolocated to Madrid, Germany. As of October 5, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# INTELLIGENCE BRIEFING: 209.50.184.121
## Executive Summary
IP address 209.50.184.121 is classified as LOW RISK with a risk score of 0. No threat indicators, abuse activity, or malicious behavior observed. No security action required.
## Ownership & Registration
- ASN: 200373
- Organization: lir-de-3xktechgmbh-1-MNT (DE-3XKTECHGMBH-20000810)
- Country: Germany (DE)
- Location: Schorfheide
- CIDR Block: 209.50.160.0/19
- RIR: ARIN
## Network Classification
- Type: Firewalled / No Services
- Infrastructure: Not a provider, CDN, cloud, VPN, proxy, Tor exit, hosting, mobile, or residential endpoint
- Anycast: No
- Bogon: No
## Threat Intelligence
- Risk Score: 0 (Low Risk)
- Abuse Confidence Score: Not applicable
- Blacklist Count: 0
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Known Campaigns: None detected
- Threat Feeds: None
## Service & Port Analysis
- Open Ports: None detected
- TLS Certificate: None
- HTTP Banner: None
- Hosted Domains: 0
## DNS Analysis
- PTR Hostnames: None
- Forward Resolution: Not confirmed
- Hosted Domains: 0
- SPF Record: Not present
- DMARC Record: Not present
- TXT Records: 0
## Control Plane Data
- BGP Prefix: 209.50.184.0/24
- Origin ASN: 200373
- RPKI State: Not reported
- IRR Consistency: Not reported
- Route Changes (30d): 0
- DNSSEC Valid: Yes
- DNSBL Listings: 0 / 0 total lists
- Operator Score: 0.1304 (Minimal)
## Neighborhood Analysis (209.50.184.0/24)
- Abuse Density: 0
- Classification: Clean
- Total Siblings: 3
- Active Siblings: 0
- Threat Siblings: 0
- Neighbor IPs:
- 209.50.184.191 (Risk: 0, Authority: 50)
- 209.50.184.242 (Risk: 0, Authority: 50)
## Relationship Graph
- Related Entities: 3 relationships identified, all pointing to network DE-3XKTECHGMBH-20000810
## Observation History
- Total Observations: 15
- Recent Signals:
- Geolocation: Germany, Schorfheide (51.17°N, 10.45°E)
- Subnet Classification: Clean (abuse density: 0)
- Operator Score: 0.15 (Minimal)
- Ownership Stability: 0 changes
- Threat Persistence: 0 days
- Temporal Status: Not persistently malicious
## Recommended Actions
- Firewall Rules: None required
- Block Recommendations: None
- Monitoring Priority: Low
- Disposition: Allow with standard logging
## Conclusion
IP 209.50.184.121 demonstrates benign characteristics consistent with a legitimate German network endpoint. No threat indicators, no service exposure, and a clean neighborhood profile support continued allowlisting with standard monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | lir-de-3xktechgmbh-1-MNT |
| ASN | AS200373 |
| Network Name | DE-3XKTECHGMBH-20000810 |
| CIDR Block | 209.50.160.0/19 |
| RIR | ARIN |
| Country | DE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS200373 |
| Network Prefix | 209.50.184.0/24 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 50% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 25% | 6 | 7 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-06 12:08:59 UTC |
| Last Seen | 2026-10-05 05:52:43 UTC |
| Profile Built | 2026-10-05 05:52:52 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 209.50.184.121
Who owns the IP address 209.50.184.121?
209.50.184.121 is registered to lir-de-3xktechgmbh-1-MNT. The address falls within the 209.50.160.0/19 network block. Registration is held at ARIN.
Where is 209.50.184.121 located?
Geolocation data places 209.50.184.121 in Madrid, Madrid, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 209.50.184.121 malicious or safe?
209.50.184.121 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 209.50.184.121?
Responsive ports observed on 209.50.184.121 include 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.