65.111.27.204📋 Copy

# IP Intelligence Briefing: 65.111.27.204/32

## Executive Summary

Threat Level: LOW – The IP address 65.111.27.204 presents minimal threat indicators with a risk score of 0. No active threat campaigns, blacklist entries, or malicious activity observed. Network classification indicates a firewalled infrastructure with no exposed services.

## Profile Overview

• Risk Score: 0 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Reputation: Low Risk
• Blacklist Count: 0

## Network Ownership & Geolocation

• ASN: 200373
• Organization: lir-de-3xktechgmbh-1-MNT
• Network Name: DE-3XKTECHGMBH-20170616
• CIDR Block: 65.111.0.0/19
• Registered RIR: ARIN
• Geolocation: New York, US (US-NY)
• Timezone: America/New_York
• Network Role: Firewalled / No Services
• Infrastructure Type: Not CDN, VPN, Proxy, Tor, Hosting, or Mobile

## Threat Intelligence

• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence Score: Not applicable
• Threat Feeds: No matches
• Campaign Likelihood: Not detected

## Service & DNS Analysis

• Open Ports: None detected
• TLS Certificate: Not present
• HTTP Title: Not available
• Forward DNS Resolution: Not confirmed
• PTR Record: None
• Hosted Domains: 0
• Email Authentication: SPF/DMARC not configured
• DNSSEC Valid: Yes

## Control Plane & Routing

• BGP Prefix: 65.111.27.0/24
• Origin ASN: 200373
• Route Stable: No
• Route Changes (30d): 0
• DNSBL Listed: 8 total lists
• RPKI State: Not available
• IRR Consistency: Not available
• Hop Count: 13
• Transit Networks: Comcast
• Operator Score: 0.1304 (Minimal)

## Neighborhood Analysis (65.111.27.0/24)

• Abuse Density: 0 (Clean)
• Classification: Clean
• Total Siblings: 3
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor Risk Distribution: 2 low risk, 0 medium, 0 high

Related Neighbors:

• 65.111.27.86 – Risk Score: 0, Authority Score: 50
• 65.111.27.233 – Risk Score: 0, Authority Score: 50

## Historical Observations

Total Signals: 15 observations recorded

Signal Types: Network role, ownership, subnet abuse density, geolocation, operator score

Key Historical Signals:

• 2026-07-22 16:49: Network role assessment (confidence: 0.30) – Not CDN, Tor, VPN, proxy, cloud, or residential
• 2026-07-22 16:46: Ownership signal (confidence: 0.85) – No ownership changes, not persistently malicious
• 2026-07-22 16:45: Subnet abuse density (confidence: 0.40) – Classification: clean, abuse density: 0
• 2026-07-22 16:45: Geolocation signal (confidence: 0.70) – Bangkok, Thailand (MaxMind GeoLite2)
• 2026-07-22 16:45: Operator score (confidence: 0.30) – Label: Minimal, score: 0.1304

Note: Geolocation data shows inconsistencies between primary profile (New York, US) and historical signals (Bangkok, Thailand). This may indicate routing anomalies or multiple geolocation sources.

## Relationships

Related Entities: 3 relationships detected

• Type: Same Network
• Target: DE-3XKTECHGMBH-20170616 (network)

## Recommended Actions

Risk Score: 0

Recommendations: None

Firewall Rules: Not applicable

Action: No immediate action required based on current risk profile. Standard monitoring practices apply.

## Intelligence Assessment

IP 65.111.27.204 is a clean, low-risk address with no observed malicious activity. The IP belongs to a firewalled infrastructure with no exposed services. Neighborhood analysis confirms the broader subnet (65.111.27.0/24) maintains a clean classification with zero threat siblings. Historical data indicates consistent benign behavior over the observation period. No firewall rules or blocking recommendations are warranted at this time. Continue standard monitoring procedures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.