188.3.223.154📋 Copy

IP INTELLIGENCE BRIEFING: 188.3.223.154

Classification: Moderate Risk (Score: 40)

Network Attribution:

The IP address 188.3.223.154 belongs to Borusan Telekom Backbone Group (ASN 8386), registered under network name TR-VFNET-20090213 within the RIPE registry. Geolocation data places the address in Gölcük, Kocaeli, Turkey (40.70°N, 29.87°E).

Current Risk Profile:

The address exhibits moderate risk characteristics with a score of 40. No active threat indicators were observed. The IP is not flagged as a Tor exit node, known attacker, or spam source. Blacklist enumeration returned zero matches. DNSBL analysis shows 2 listings out of 8 total lists checked.

Service Activity:

Network scanning detected no open ports. The service purpose is classified as "Firewalled / No Services." No TLS certificates, HTTP headers, or server banners were observed. DNS reverse resolution and forward resolution both failed.

Network Context:

The /24 subnet (188.3.223.0/24) contains one active neighbor: 188.3.223.114. The neighbor exhibits a risk score of 55 with an authority score of 50. Subnet abuse density is 0. The relationship graph shows six entries linking to the same network entity (TR-VFNET-20090213), indicating internal network relationships only.

Temporal Analysis:

Fourteen observation signals were recorded across the observation period. Ownership stability remains unchanged with zero ownership transitions. No persistent malicious activity was detected. Threat observation count is zero. The IP is not classified as persistently malicious.

Behavioral Indicators:

Control plane analysis indicates the route is not stable (isRouteStable: false), though route changes over 30 days remain at zero. RPKI state and IRR consistency data were not resolved. BGP origin is ASN 8386 with prefix 188.3.222.0/23. DNSSEC validation is confirmed.

Operational Notes:

ICMP validation was blocked, resulting in distance calculation of 2,189.4 km with minimum possible RTT of 43.79 ms. Geo validation remains plausible across all sources. No honeypot hits or enumeration strikes were recorded.

Recommended Action:

Maintain monitoring. The IP presents moderate risk without active malicious indicators. No immediate blocking is warranted, but the presence of a neighboring IP with elevated risk (188.3.223.114, score 55) warrants continued surveillance of the /24 subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.