5.26.190.79
IP Intelligence Briefing: 5.26.190.79
Date: 2026-06-12
---
**1. Risk Profile**
- Risk Score: 40 (Moderate Risk)
- Ownership: Assigned to Turkcell IP Manager (AS16135, TR-TURKCELL-INTERNET).
- Geolocation: Registered to the U.S. (Boston, MA), but ownership ties to Turkey.
- Threat Indicators: No malicious activity detected (no blacklists, campaigns, or abuse reports).
---
**2. Network & DNS Context**
- Subnet: 5.26.190.79/32 (single host).
- BGP Prefix: 5.26.128.0/17, managed by Turkcell.
- DNS: No PTR records found; no domain associations.
- DNSSEC: Validated.
- Neighbors: No sibling IPs in the /24 subnet (likely due to /32 allocation).
---
**3. Temporal Observations**
- Recent Activity:
- 12 observations over 30 days, including DNSSEC validation and BGP prefix tracking.
- No persistent threats or abuse reports.
- Stability: Route stability flagged as low (potential routing anomalies).
---
**4. Relationships & Connections**
- Linked Entities:
- Turkcell’s network (TR-TURKCELL-INTERNET).
- No direct associations with known malicious domains, organizations, or certificates.
---
**5. Recommended Actions**
- Firewall Blocking:
- `iptables`: `iptables -A INPUT -s 5.26.190.79 -j DROP`
- `nftables`: `nft add rule inet filter input ip saddr 5.26.190.79 drop`
- Cloudflare/WAF: Block IP with rule `ip.src eq 5.26.190.79`.
- Monitoring: Investigate geolocation discrepancy (Turkcell ownership vs. U.S. registration). Verify BGP route stability.
---
**6. Summary**
The IP exhibits moderate risk with no direct malicious indicators but shows potential routing instability. Ownership by Turkcell (Turkey) conflicts with U.S. geolocation, suggesting possible misconfiguration or routing anomalies. No immediate action is required beyond monitoring, but blocking is recommended for high-risk environments.
Next Steps: Cross-reference with internal threat feeds, validate geolocation accuracy, and monitor for unusual traffic patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Turkcell IP Manager |
| ASN | AS16135 |
| Network Name | TR-TURKCELL-INTERNET |
| CIDR Block | 5.26.0.0/15 |
| RIR | RIPE |
| Country | TR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 27% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 13% | 1 | 1 |
| Overall | 6% | 3 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-03 18:32:00 UTC |
| Last Seen | 2026-06-12 22:50:06 UTC |
| Profile Built | 2026-06-12 22:58:28 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 15 |
Full dossier details are available via our API.