81.212.212.153
Intelligence analysts identified 81.212.212.153 as a low-risk endpoint with a risk score of 25. The address resides within network block 81.212.0.0/16 under ASN 9121, registered to Turk Telekomunikasyon A.S. (TTNET). While geolocation data placed the endpoint in Vienna, Austria, mobile carrier attribution indicated a Turkish origin (Turkcell, Turkey), resulting in a geographic discrepancy.
Network reconnaissance revealed the endpoint operated as mobile infrastructure with no open ports or active web services; the service purpose was classified as firewalled. DNS records resolved to a static Turk Telekom hostname, though forward resolution remained unconfirmed. Although the system flagged the host as a "Suspicious Host," no specific threat indicators, known campaigns, or blacklist entries were associated with the IP. Behavioral analysis recorded zero honeypot hits and zero enumeration strikes.
The immediate neighborhood was classified as clean with zero abuse density. Despite the generic suspicious tagging, the overall recommendation was to monitor the address due to the geographic inconsistency between network registration and mobile carrier footprint. No immediate firewall rules were deemed necessary based on the clean neighborhood and low risk profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | AS9121-MNT |
| ASN | AS9121 |
| Network Name | TTNET |
| CIDR Block | 81.212.0.0/16 |
| RIR | RIPE |
| Country | TR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 20-denizli-sr12e-t3-1---20-denizli-sr2s-t2-2.statik.turktelekom.com.tr |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 20-denizli-sr12e-t3-1---20-denizli-sr2s-t2-2.statik.turktelekom.com.tr |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-09 09:37:46 UTC |
| Last Seen | 2026-09-20 21:57:55 UTC |
| Profile Built | 2026-09-20 22:13:47 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 27 |
Full dossier details are available via our API.