37.140.223.225
37.140.223.225 is an IPv4 address operated by lir-cy-tkbytech1-1-MNT (AS206092), geolocated to New York, United States. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
INTELLIGENCE BRIEFING: IP 37.140.223.225/32
Classification: Low Risk
Date: 2026-07-23
Analyst: IPDebrief Intelligence
---
EXECUTIVE SUMMARY
Target IP 37.140.223.225 presents a low-risk profile with a risk score of 25. The address operates within a /24 subnet classified as "clean" with minimal abuse density (0.0462). No active threat indicators were detected across observed timeframes.
OWNERSHIP AND GEOSPATIAL
The IP is registered to ASN 206092 under organization lir-cy-tkbytech1-1-MNT. Geographic consensus places the address in New York, US, with validation from two geolocation sources. Control plane data confirms BGP prefix 37.140.223.0/24 with origin ASN 206092. DNSSEC validation is active on the reverse zone.
NETWORK CLASSIFICATION
The target is classified as "Firewalled / No Services" with no open ports detected. The IP is not categorized as cloud infrastructure, CDN, VPN, proxy, Tor exit node, or hosting service. Service fingerprints indicate no HTTP/HTTPS activity, TLS certificates, or email authentication records (SPF/DMARC).
THREAT INDICATORS
No threat indicators were observed. The IP is not flagged as a known attacker, spam source, or Tor exit node. Blacklist count is 0. DNSBL presence shows 1 listing out of 8 total lists monitored. Pulsedive risk assessment returned null. No known campaign associations were identified.
NEIGHBORHOOD ANALYSIS
The /24 subnet contains 65 sibling addresses with 4 active and 3 threat-flagged neighbors. Risk distribution shows 58 low-risk neighbors, 6 medium-risk, and 0 high-risk addresses. This indicates minimal subnet-wide abuse activity.
OBSERVATION HISTORY
Fifteen observations were recorded over the analysis window. Most recent signals from 2026-07-23 include: ownership status (0 changes), subnet abuse density (0.0462, clean classification), geolocation (Los Angeles, California), and DNSSEC validation (active). No persistent malicious behavior was confirmed. Threat observation count remains at 1.
RELATED ENTITIES
Three relationships identified, all referencing the same network block CY-TKBYTECH1-20210803. No additional connections to organizations, hostnames, or certificates were discovered.
RECOMMENDED ACTIONS
No automated firewall rules or blocking recommendations generated. Risk score of 25 falls below typical threshold for immediate action. The IP requires no special handling based on current threat profile.
CONCLUSION
IP 37.140.223.225 presents minimal security concern. The address exhibits normal residential or infrastructure characteristics with no malicious indicators. No immediate defensive measures required. Monitor for changes in threat profile if this IP appears in threat reports or incident logs.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | lir-cy-tkbytech1-1-MNT |
| ASN | AS206092 |
| Network Name | CY-TKBYTECH1-20210803 |
| CIDR Block | 37.140.223.0/24 |
| RIR | RIPE |
| Country | TR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS206092 |
| Network Prefix | 37.140.223.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 23:32:04 UTC |
| Last Seen | 2026-10-07 03:00:31 UTC |
| Profile Built | 2026-10-07 03:01:14 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 18 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 37.140.223.225
Who owns the IP address 37.140.223.225?
37.140.223.225 is registered to lir-cy-tkbytech1-1-MNT. The address falls within the 37.140.223.0/24 network block. Registration is held at RIPE.
Where is 37.140.223.225 located?
Geolocation data places 37.140.223.225 in New York, US-NY, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 37.140.223.225 malicious or safe?
37.140.223.225 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.