# 65.111.23.188 — IP Intelligence Summary

65.111.23.188 is an IPv4 address operated by lir-de-3xktechgmbh-1-MNT (AS200373), geolocated to New York, Germany. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/65.111.23.188
- Last updated: 2026-10-06

## Ownership

- Organization: lir-de-3xktechgmbh-1-MNT
- Network name: DE-3XKTECHGMBH-20170616
- Allocated block: 65.111.0.0/19
- ASN: AS200373 (https://ipdebrief.com/asn/200373)
- Regional registry: ARIN

## Location

- City: New York
- Region: US-NY
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 22/tcp — ssh

## Analyst narrative

Analysts identified IP address 65.111.23.188 as a single-service host with a low-risk reputation profile and a risk score of zero. The address was registered under ASN 200373, assigned to lir-de-3xktechgmbh-1-MNT within the ARIN RIR. Geolocation data indicated an origin in Germany with coordinates 51.17°N, 10.45°E and the Europe/Berlin timezone, though one source indicated US-NY.

Network scanning detected an open SSH port (22/tcp) with a banner reporting "Exceeded MaxStartups." No TLS certificates, HTTP services, or DNS forward resolutions were confirmed. Control plane analysis showed the BGP prefix 65.111.23.0/24 was not route stable, although DNSSEC validation remained valid.

Threat intelligence feeds did not flag the IP as a known attacker, spam source, or Tor exit node. Blacklist enumeration returned zero matches. Behavioral analysis recorded zero incidents, honeypot hits, or WAF violations. The surrounding subnet (65.111.23.0/24) exhibited mixed classification with an abuse density of 0.2667, containing four threat siblings among fifteen total active siblings.

Observation history recorded first activity on 2026-07-13 and most recent activity on 2026-09-03. Attribution confidence remained moderate at 50%. The overall assessment concluded no significant risk indicators were present. SOC analysts recommended allowing traffic with an information severity rating.

## Nearby addresses

- 65.111.23.13 (https://ipdebrief.com/65.111.23.13)
- 65.111.23.14 (https://ipdebrief.com/65.111.23.14)
- 65.111.23.16 (https://ipdebrief.com/65.111.23.16)
- 65.111.23.30 (https://ipdebrief.com/65.111.23.30)
- 65.111.23.44 (https://ipdebrief.com/65.111.23.44)
- 65.111.23.62 (https://ipdebrief.com/65.111.23.62)
- 65.111.23.79 (https://ipdebrief.com/65.111.23.79)
- 65.111.23.96 (https://ipdebrief.com/65.111.23.96)
- 65.111.23.108 (https://ipdebrief.com/65.111.23.108)
- 65.111.23.142 (https://ipdebrief.com/65.111.23.142)
- 65.111.23.153 (https://ipdebrief.com/65.111.23.153)
- 65.111.23.154 (https://ipdebrief.com/65.111.23.154)

---

Source: IPDebrief, "65.111.23.188 IP intelligence", https://ipdebrief.com/65.111.23.188, updated 2026-10-06. Assessments are probabilistic.