# 45.154.98.52 — IP Intelligence Summary 45.154.98.52 is an IPv4 address operated by lir-de-1337services-1-MNT (AS210558), geolocated to Lelystad, Netherlands. Its reverse DNS name is 194.26.192.123.powered.by.amazon.com. As of October 10, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/45.154.98.52 - Last updated: 2026-10-10 ## Ownership - Organization: lir-de-1337services-1-MNT - Network name: DE-1337SERVICES-20211028 - Allocated block: 45.154.98.0/24 - ASN: AS210558 (https://ipdebrief.com/asn/210558) - Regional registry: ARIN ## Location - City: Lelystad - Region: Flevoland - Country: Netherlands - Time zone: Europe/Amsterdam ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (0/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - 194.26.192.123.powered.by.amazon.com - Forward-confirmed: no ## Analyst narrative \# IP Intelligence Briefing: 45.154.98.52/32 **Classification:** Low Risk / Defensive Monitoring **Date:** July 2026 **Prepared For:** SOC Analyst \--- \## Executive Summary Target IP 45.154.98.52/32 presents a low-risk profile with no active threat indicators. The address is registered to the DE-1337SERVICES-20211028 network block (ASN 210558) within the Netherlands. While the subnet shows minimal abuse activity, 23% of neighboring IPs exhibit elevated risk scores. No immediate blocking action is recommended, but continued observation is advised due to route stability concerns. \--- \## Risk Assessment | Metric | Value | Assessment | |--------|-------|------------| | Risk Score | 25 | Low | | Abuse Confidence Score | N/A | No indicators | | Blacklist Count | 0 | Clean | | DNSBL Listed | 1/8 | Minimal | | Reputation | Low Risk | Benign | **Threat Indicators:** None detected. IP is not classified as a Tor exit node, known attacker, or spam source. No correlation to known threat campaigns. \--- \## Network Attribution \- **Organization:** lir-de-1337services-1-MNT \- **Netname:** DE-1337SERVICES-20211028 \- **ASN:** 210558 (ARIN) \- **Location:** Lelystad, Flevoland, Netherlands (51.37°N, 4.91°E) \- **CIDR Block:** 45.154.98.0/24 \- **Geolocation Confidence:** Consensus confirmed across multiple sources **Note:** Forward DNS resolution points to 194.26.192.123.powered.by.amazon.com, though forward confirmation is not validated. \--- \## Service & Network State \- **Open Ports:** None detected \- **Service Status:** Firewalled / No Services \- **TLS Certificate:** None \- **BGP Routing:** Route stability compromised (isRouteStable: false) \- **RPKI/Irr:** Status not available \--- \## Neighborhood Analysis (45.154.98.0/24) | Metric | Value | |--------|-------| | Total Siblings | 31 | | Active Siblings | 13 | | Threat Siblings | 2 | | Abuse Density | 0.0645 | | Subnet Classification | Mostly Clean | | Inherited Risk | 2 | **Risk Distribution Among Neighbors:** \- High Risk: 0 \- Medium Risk: 7 \- Low Risk: 23 **Notable Siblings with Elevated Risk:** \- 45.154.98.108 (Risk: 50) \- 45.154.98.153 (Risk: 49) \- 45.154.98.65, .71, .76, .214, .229 (Risk: 40) \--- \## Historical Observations **Observation Count:** 19 signals recorded **Temporal Trends:** \- No ownership changes detected \- No persistent malicious activity \- Threat persistence days: 0 \- Threat observation count: 0 **Recent Signals (July 22, 2026):** \- Geolocation: Consistent NL attribution with 52-56% confidence \- Abuse density: Stable at 0.0645 \- Network classification: Maintained as "mostly_clean" \--- \## Relationships **Total Relationships:** 8 \- **Same Network (4):** DE-1337SERVICES-20211028 \- **DNS Associations (4):** 194.26.192.123.powered.by.amazon.com \--- \## Recommended Actions **Current Status:** No active recommendations due to low-risk profile. **Firewall Rules:** Not applicable (risk score below threshold for blocking) **Monitoring Priority:** LOW **Recommended Observations:** 1. Monitor for service activation on this IP 2. Track route stability (isRouteStable: false) 3. Continue neighborhood-level monitoring for subnet-wide activity spikes **Blocking Threshold:** Not recommended unless new threat indicators emerge \--- \## Conclusion IP 45.154.98.52 is currently benign with no actionable threat intelligence. The subnet shows minimal abuse density, though 7 sibling IPs carry medium risk and several carry elevated scores. SOC teams may consider: \- Whitelisting or monitoring if legitimate traffic originates from this IP \- Correlating with other medium-risk siblings for potential campaign correlation \- Watching for service activation if traffic patterns change **Status:** Continue passive monitoring. No immediate action required. ## Nearby addresses - 45.154.98.19 (https://ipdebrief.com/45.154.98.19) - 45.154.98.26 (https://ipdebrief.com/45.154.98.26) - 45.154.98.33 (https://ipdebrief.com/45.154.98.33) - 45.154.98.35 (https://ipdebrief.com/45.154.98.35) - 45.154.98.38 (https://ipdebrief.com/45.154.98.38) - 45.154.98.42 (https://ipdebrief.com/45.154.98.42) - 45.154.98.44 (https://ipdebrief.com/45.154.98.44) - 45.154.98.47 (https://ipdebrief.com/45.154.98.47) - 45.154.98.62 (https://ipdebrief.com/45.154.98.62) - 45.154.98.65 (https://ipdebrief.com/45.154.98.65) - 45.154.98.71 (https://ipdebrief.com/45.154.98.71) - 45.154.98.76 (https://ipdebrief.com/45.154.98.76) --- Source: IPDebrief, "45.154.98.52 IP intelligence", https://ipdebrief.com/45.154.98.52, updated 2026-10-10. Assessments are probabilistic.