# 65.111.22.196 — IP Intelligence Summary 65.111.22.196 is an IPv4 address operated by lir-de-3xktechgmbh-1-MNT (AS200373), geolocated to New York, United States. As of October 5, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/65.111.22.196 - Last updated: 2026-10-05 ## Ownership - Organization: lir-de-3xktechgmbh-1-MNT - Network name: DE-3XKTECHGMBH-20170616 - Allocated block: 65.111.0.0/19 - ASN: AS200373 (https://ipdebrief.com/asn/200373) - Regional registry: ARIN ## Location - City: New York - Region: US-NY - Country: United States - Time zone: America/New_York ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Exposed services - 22/tcp — ssh ## Analyst narrative \# IP INTELLIGENCE BRIEFING: 65.111.22.196/32 **Classification:** Low Risk | **Last Updated:** 2026-07-22 \--- \## EXECUTIVE SUMMARY IP address 65.111.22.196 presents a low-risk profile (risk score: 25) with no active threat indicators, no open services, and no association with known malicious infrastructure. The IP operates within a clean subnet environment and shows no evidence of abuse or malicious activity. \--- \## NETWORK OWNERSHIP \- **ASN:** 200373 \- **Organization:** lir-de-3xktechgmbh-1-MNT \- **Netname:** DE-3XKTECHGMBH-20170616 \- **CIDR Block:** 65.111.0.0/19 \- **RIR:** ARIN \- **Geolocation:** United States (New York, US-NY) \- **Service Purpose:** Firewalled / No Services Detected \--- \## THREAT ASSESSMENT | Indicator | Status | |-----------|--------| | Risk Score | 25 (Low Risk) | | Abuse Confidence | N/A | | Blacklist Count | 0 | | Known Attacker | No | | Spam Source | No | | Tor Exit Node | No | | Known Campaigns | None | | DNSBL Listed | 1 of 8 total lists | The IP exhibits no malicious indicators across threat feeds and reputation sources. Control plane analysis shows route stability and valid DNSSEC configuration. \--- \## NETWORK BEHAVIOR \- **Open Ports:** None detected \- **TLS Certificate:** Not present \- **DNS Resolution:** Forward confirmation failed; no PTR hostnames \- **Service Fingerprint:** No web services, email authentication (SPF/DMARC) not configured \- **Honeypot Strikes:** 0 \- **WAF Violations:** 0 The absence of open services and lack of web/email infrastructure reduces the likelihood of the IP being used as a command-and-control endpoint or spam relay. \--- \## NEIGHBORHOOD ANALYSIS **Subnet:** 65.111.22.0/24 \- **Total Siblings:** 10 IPs \- **Abuse Density:** 0 (Clean) \- **Threat Siblings:** 0 \- **Classification:** Clean **Risk Distribution:** \- High Risk: 0 \- Medium Risk: 0 \- Low Risk: 9 Only one neighboring IP (65.111.22.110) shows a risk score of 25; the remaining eight neighbors are clean with risk scores of 0. The subnet demonstrates minimal abuse activity. \--- \## OBSERVATION HISTORY **Total Observations:** 15 (Recent 2026-07-22) \- **Ownership Changes:** 0 \- **Threat Persistence Days:** 0 \- **Is Persistently Malicious:** No \- **Operator Score:** 0.1304 (Minimal) \- **Geo Plausibility:** False Historical signals confirm consistent low-risk behavior with no escalation in threat activity over time. \--- \## RELATIONSHIP GRAPH **Connected Entities:** 4 \- All relationships map to network entity "DE-3XKTECHGMBH-20170616" No associations with external organizations, hostnames, or certificates beyond the registered network. \--- \## RECOMMENDED ACTIONS No automated security actions recommended at this time. The IP profile indicates benign behavior with no actionable threat signals. Routine monitoring is sufficient. \--- **Analyst Notes:** This IP address should be treated as low-priority for defensive operations. No blocking or rate-limiting actions are warranted based on current intelligence. ## Nearby addresses - 65.111.22.41 (https://ipdebrief.com/65.111.22.41) - 65.111.22.76 (https://ipdebrief.com/65.111.22.76) - 65.111.22.97 (https://ipdebrief.com/65.111.22.97) - 65.111.22.110 (https://ipdebrief.com/65.111.22.110) - 65.111.22.130 (https://ipdebrief.com/65.111.22.130) - 65.111.22.159 (https://ipdebrief.com/65.111.22.159) - 65.111.22.180 (https://ipdebrief.com/65.111.22.180) - 65.111.22.186 (https://ipdebrief.com/65.111.22.186) - 65.111.22.189 (https://ipdebrief.com/65.111.22.189) - 65.111.22.222 (https://ipdebrief.com/65.111.22.222) - 65.111.22.250 (https://ipdebrief.com/65.111.22.250) --- Source: IPDebrief, "65.111.22.196 IP intelligence", https://ipdebrief.com/65.111.22.196, updated 2026-10-05. Assessments are probabilistic.