153.52.92.13📋 Copy

# IP Intelligence Briefing: 153.52.92.13/32

## Executive Summary

IP 153.52.92.13 presents a Moderate Risk profile (risk score: 65/100) with conflicting geolocation data and no active threat indicators. The address belongs to Dogus SEKERCI (Netlen-Internet-Hizmetleri-Ltd-Sti) under ASN 44620 within the APNIC RIR region. While the immediate subnet shows clean classification, elevated risk scoring warrants defensive monitoring.

---

## Network Classification & Ownership

• ASN: 44620 (Dogus SEKERCI)
• Netname: Netlen-Internet-Hizmetleri-Ltd-Sti
• CIDR: 153.52.92.0/24
• RIR: APNIC
• Country Attribution: DE (Germany) / TR (Turkey) — CONFLICTING DATA
• Service Purpose: Firewalled / No Services
• Infrastructure Type: No services detected, no open ports

---

## Threat Assessment

• Risk Score: 65/100 (Moderate Risk)
• Abuse Confidence: Not assessed
• Threat Indicators: None detected
• Blacklist Status: 0 active blacklist entries
• DNSBL Listed: 3 of 8 total lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Likelihood: Not established

---

## Neighborhood Analysis (153.52.92.0/24)

• Abuse Density: 0 (Clean)
• Subnet Classification: Clean
• Threat Siblings: 0
• Active Siblings: 0
• Risk Distribution: No high/medium risk neighbors detected

---

## Historical Observation Trend

16 observations recorded across the monitoring period. Recent activity (2026-07-29) indicates:

• Subnet consistently classified as clean
• No ownership changes detected
• No persistent malicious activity observed
• Traceroute analysis shows 30 hops with incomplete target reach

---

## Related Entities

• Same Network: Netlen-Internet-Hizmetleri-Ltd-Sti (2 relationship entries)

---

## Recommended Actions

Monitoring

• Increase logging verbosity and review recent activity from this IP (Severity: High)

Firewall Rules

```bash

# iptables

iptables -A INPUT -s 153.52.92.13 -j DROP

# nftables

nft add rule inet filter input ip saddr 153.52.92.13 drop

# nginx

deny 153.52.92.13;

# pfSense

153.52.92.13/32

# Cloudflare WAF

{"description":"Block 153.52.92.13 — IPDebrief risk score 65","action":"block","filter":{"expression":"ip.src eq 153.52.92.13"}}

# AWS WAF

{"Addresses":["153.52.92.13/32"],"Description":"IPDebrief risk 65"}

```

---

## Analyst Notes

The moderate risk score combined with 3 DNSBL listings suggests potential reputation issues despite current clean subnet classification. Conflicting geolocation data (DE/TR) warrants verification. No active malicious indicators present, but elevated risk scoring justifies defensive blocking or enhanced logging.

Classification: Moderate Risk

Priority: Monitor / Consider Blocking

Last Updated: 2026-07-29

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.