185.93.89.36
185.93.89.36 is an IPv4 address operated by DWCI NET (AS213790), geolocated to Amsterdam, United Arab Emirates. As of October 10, 2026, IPDebrief rates it High Risk (80/100); no anonymizing service was detected.
# IP Intelligence Briefing: 185.93.89.36/32
## Executive Summary
IP 185.93.89.36 presents a moderate risk profile (65/100) associated with network infrastructure in the 185.93.89.0/24 subnet. The IP exhibits firewalled behavior with no active services and is registered to DWCI NET (ASN 213790, AMWAJ network). Neighborhood analysis reveals elevated abuse density (24.14%) within the /24 subnet with multiple high-risk peers.
## Technical Profile
- Risk Score: 65/100 (Moderate Risk)
- ASN: 213790 (DWCI NET)
- Network: AMWAJ (185.93.89.0/25)
- Geolocation: UAE (AE), Amsterdam region (lat: 23.42, lon: 53.85)
- Classification: Firewalled / No Services
- DNSBL Listings: 3/8 lists (dnsblListedCount)
- Control Plane: Route stability flagged as false; 0 route changes in 30 days
## Threat Assessment
- Known Threats: None (no campaigns, not a known attacker, not a spam source)
- Infrastructure Type: Not CDN, VPN, proxy, Tor, or hosting infrastructure
- Open Ports: None detected
- Email Reputation: No email services configured (no SPF/DMARC)
## Neighborhood Analysis
The 185.93.89.0/24 subnet shows mixed classification with concerning abuse density metrics:
- Total Siblings: 29
- Active Siblings: 21
- Threat Siblings: 7
- Abuse Density: 0.2414
High-Risk Neighbors Requiring Attention:
- 185.93.89.9 (Risk: 80)
- 185.93.89.70 (Risk: 80)
- 185.93.89.71 (Risk: 65)
The subnet risk distribution is skewed toward medium-risk (20/28 neighbors), indicating potential coordinated infrastructure.
## Observation History
- Total Observations: 16
- Recent Activity: Multiple observations recorded 2026-07-22
- Threat Persistence: 0 days (no persistent malicious activity detected)
- Ownership Changes: 0
## Recommended Actions
Immediate: Increase logging verbosity for this IP address due to elevated risk score (65/100).
Firewall Rules:
```
iptables -A INPUT -s 185.93.89.36 -j DROP
nft add rule inet filter input ip saddr 185.93.89.36 drop
```
Contextual Considerations: Given the neighborhood's abuse density and the presence of multiple high-risk peers (80/100 risk scores), consider implementing subnet-level monitoring rules for 185.93.89.0/24 to maintain visibility on related infrastructure.
---
*Generated: 2026-07-22 | Source: IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DWCI NET |
| ASN | AS213790 |
| Network Name | AMWAJ |
| CIDR Block | 185.93.89.0/25 |
| RIR | RIPE |
| Country | AE |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Multi-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 443, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS213790 |
| Network Prefix | 185.93.89.0/24 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 5 |
| routing | 8% | 1 | 1 |
| services | 17% | 2 | 3 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 12% | 2 | 2 |
| Overall | 16% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:21:23 UTC |
| Last Seen | 2026-10-10 23:09:13 UTC |
| Profile Built | 2026-10-10 23:12:08 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 26 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 185.93.89.36
Who owns the IP address 185.93.89.36?
185.93.89.36 is registered to DWCI NET. The address falls within the 185.93.89.0/25 network block. Registration is held at RIPE.
Where is 185.93.89.36 located?
Geolocation data places 185.93.89.36 in Amsterdam. The local time zone is Asia/Dubai. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 185.93.89.36 malicious or safe?
185.93.89.36 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 185.93.89.36?
Responsive ports observed on 185.93.89.36 include 80, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.