# 65.111.27.204 — IP Intelligence Summary

65.111.27.204 is an IPv4 address operated by lir-de-3xktechgmbh-1-MNT (AS200373), geolocated to Bangkok, Germany. As of October 7, 2026, IPDebrief rates it Low Risk (20/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/65.111.27.204
- Last updated: 2026-10-07

## Ownership

- Organization: lir-de-3xktechgmbh-1-MNT
- Network name: DE-3XKTECHGMBH-20170616
- Allocated block: 65.111.0.0/19
- ASN: AS200373 (https://ipdebrief.com/asn/200373)
- Regional registry: ARIN

## Location

- City: Bangkok
- Region: Bangkok
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (20/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 22/tcp — ssh

## Analyst narrative

\# IP Intelligence Briefing: 65.111.27.204/32

\## Executive Summary

**Threat Level: LOW** – The IP address 65.111.27.204 presents minimal threat indicators with a risk score of 0. No active threat campaigns, blacklist entries, or malicious activity observed. Network classification indicates a firewalled infrastructure with no exposed services.

\## Profile Overview

\- **Risk Score:** 0 (Low Risk)

\- **Provider Score:** 0

\- **Authority Score:** 0

\- **Stability Score:** 0

\- **Reputation:** Low Risk

\- **Blacklist Count:** 0

\## Network Ownership & Geolocation

\- **ASN:** 200373

\- **Organization:** lir-de-3xktechgmbh-1-MNT

\- **Network Name:** DE-3XKTECHGMBH-20170616

\- **CIDR Block:** 65.111.0.0/19

\- **Registered RIR:** ARIN

\- **Geolocation:** New York, US (US-NY)

\- **Timezone:** America/New_York

\- **Network Role:** Firewalled / No Services

\- **Infrastructure Type:** Not CDN, VPN, Proxy, Tor, Hosting, or Mobile

\## Threat Intelligence

\- **Known Campaigns:** None

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Abuse Confidence Score:** Not applicable

\- **Threat Feeds:** No matches

\- **Campaign Likelihood:** Not detected

\## Service & DNS Analysis

\- **Open Ports:** None detected

\- **TLS Certificate:** Not present

\- **HTTP Title:** Not available

\- **Forward DNS Resolution:** Not confirmed

\- **PTR Record:** None

\- **Hosted Domains:** 0

\- **Email Authentication:** SPF/DMARC not configured

\- **DNSSEC Valid:** Yes

\## Control Plane & Routing

\- **BGP Prefix:** 65.111.27.0/24

\- **Origin ASN:** 200373

\- **Route Stable:** No

\- **Route Changes (30d):** 0

\- **DNSBL Listed:** 8 total lists

\- **RPKI State:** Not available

\- **IRR Consistency:** Not available

\- **Hop Count:** 13

\- **Transit Networks:** Comcast

\- **Operator Score:** 0.1304 (Minimal)

\## Neighborhood Analysis (65.111.27.0/24)

\- **Abuse Density:** 0 (Clean)

\- **Classification:** Clean

\- **Total Siblings:** 3

\- **Active Siblings:** 0

\- **Threat Siblings:** 0

\- **Neighbor Risk Distribution:** 2 low risk, 0 medium, 0 high

**Related Neighbors:**

\- 65.111.27.86 – Risk Score: 0, Authority Score: 50

\- 65.111.27.233 – Risk Score: 0, Authority Score: 50

\## Historical Observations

**Total Signals:** 15 observations recorded

**Signal Types:** Network role, ownership, subnet abuse density, geolocation, operator score

**Key Historical Signals:**

\- 2026-07-22 16:49: Network role assessment (confidence: 0.30) – Not CDN, Tor, VPN, proxy, cloud, or residential

\- 2026-07-22 16:46: Ownership signal (confidence: 0.85) – No ownership changes, not persistently malicious

\- 2026-07-22 16:45: Subnet abuse density (confidence: 0.40) – Classification: clean, abuse density: 0

\- 2026-07-22 16:45: Geolocation signal (confidence: 0.70) – Bangkok, Thailand (MaxMind GeoLite2)

\- 2026-07-22 16:45: Operator score (confidence: 0.30) – Label: Minimal, score: 0.1304

**Note:** Geolocation data shows inconsistencies between primary profile (New York, US) and historical signals (Bangkok, Thailand). This may indicate routing anomalies or multiple geolocation sources.

\## Relationships

**Related Entities:** 3 relationships detected

\- Type: Same Network

\- Target: DE-3XKTECHGMBH-20170616 (network)

\## Recommended Actions

**Risk Score:** 0

**Recommendations:** None

**Firewall Rules:** Not applicable

**Action:** No immediate action required based on current risk profile. Standard monitoring practices apply.

\## Intelligence Assessment

IP 65.111.27.204 is a clean, low-risk address with no observed malicious activity. The IP belongs to a firewalled infrastructure with no exposed services. Neighborhood analysis confirms the broader subnet (65.111.27.0/24) maintains a clean classification with zero threat siblings. Historical data indicates consistent benign behavior over the observation period. No firewall rules or blocking recommendations are warranted at this time. Continue standard monitoring procedures.

## Nearby addresses

- 65.111.27.5 (https://ipdebrief.com/65.111.27.5)
- 65.111.27.86 (https://ipdebrief.com/65.111.27.86)
- 65.111.27.140 (https://ipdebrief.com/65.111.27.140)
- 65.111.27.233 (https://ipdebrief.com/65.111.27.233)

---

Source: IPDebrief, "65.111.27.204 IP intelligence", https://ipdebrief.com/65.111.27.204, updated 2026-10-07. Assessments are probabilistic.
