# 104.207.52.217 — IP Intelligence Summary

104.207.52.217 is an IPv4 address operated by lir-de-3xktechgmbh-1-MNT (AS200373), geolocated to City of London, Germany. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.207.52.217
- Last updated: 2026-10-06

## Ownership

- Organization: lir-de-3xktechgmbh-1-MNT
- Network name: DE-3XKTECHGMBH-20140924
- Allocated block: 104.207.32.0/19
- ASN: AS200373 (https://ipdebrief.com/asn/200373)
- Regional registry: ARIN

## Location

- City: City of London
- Region: England
- Country: Germany
- Time zone: Europe/Berlin

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 22/tcp — ssh

## Analyst narrative

Intelligence Briefing: 104.207.52.217/32

The IP address was classified as Low Risk with a risk score of 25. Ownership was attributed to ASN 200373 (lir-de-3xktechgmbh-1-MNT) under the netname DE-3XKTECHGMBH-20140924. The network role was identified as a Single-Service Host within the 104.207.32.0/19 CIDR block.

Technical observations revealed an open TCP port 22 (SSH) running OpenSSH 9.6p1 Ubuntu-3ubuntu13.18. No HTTP, TLS, or CDN services were detected. DNS analysis showed no forward confirmation or PTR records, with zero hosted domain associations and no email authentication protocols (SPF, DMARC).

Threat analysis indicated zero blacklist entries and no presence in known attacker feeds or Tor exit networks. Geolocation data associated the address with Germany (DE) and the Europe/Berlin timezone, though regional consensus was inconsistent. Control plane analysis confirmed the BGP prefix 104.207.52.0/24 originated from ASN 200373. No immediate malicious indicators were observed.

Recommendation: Continue standard monitoring for SSH traffic activity.

## Nearby addresses

- 104.207.52.8 (https://ipdebrief.com/104.207.52.8)
- 104.207.52.24 (https://ipdebrief.com/104.207.52.24)
- 104.207.52.27 (https://ipdebrief.com/104.207.52.27)
- 104.207.52.36 (https://ipdebrief.com/104.207.52.36)
- 104.207.52.45 (https://ipdebrief.com/104.207.52.45)
- 104.207.52.58 (https://ipdebrief.com/104.207.52.58)
- 104.207.52.80 (https://ipdebrief.com/104.207.52.80)
- 104.207.52.135 (https://ipdebrief.com/104.207.52.135)
- 104.207.52.136 (https://ipdebrief.com/104.207.52.136)
- 104.207.52.143 (https://ipdebrief.com/104.207.52.143)
- 104.207.52.146 (https://ipdebrief.com/104.207.52.146)
- 104.207.52.162 (https://ipdebrief.com/104.207.52.162)

---

Source: IPDebrief, "104.207.52.217 IP intelligence", https://ipdebrief.com/104.207.52.217, updated 2026-10-06. Assessments are probabilistic.