188.2.120.33
# IP Intelligence Briefing: 188.2.120.33/32
Classification: Moderate Risk
Date: Current Analysis
Prepared For: SOC Operations
---
## Executive Summary
IP address 188.2.120.33 was classified as Moderate Risk (Score: 40) during the analysis period. The IP is assigned to ASN 31042 (SBBNET, Dragoljub Spasojevic) under the RIPE RIR registry with CIDR block 188.2.0.0/17. Network infrastructure indicated the IP was firewalled with no services exposed, and no open ports were detected during scanning.
## Ownership and Geolocation
Network Provider: SBBNET (Dragoljub Spasojevic)
ASN: 31042
Geolocation: Frankfurt, DE (Germany)
Subnet Classification: 188.2.120.33/24
Geolocation Consensus: Inconsistent across sources (geoPlausible: false)
## Threat Indicators
- Blacklist Status: Listed on 2 of 8 total DNSBL feeds
- Known Campaigns: None identified
- Threat Classification: Not flagged as known attacker, Tor exit, or spam source
- Abuse Confidence: No abuse confidence score provided in primary profile
## DNS and Email Infrastructure
PTR Record: cable-188-2-120-33.dynamic.sbb.rs
Associated Domain: sbb.rs
Email Authentication: SPF and DMARC records present (both enabled)
Forward Resolution: 1 hostname resolution confirmed
## Network Behavior and Control Plane
BGP Prefix: 188.2.0.0/16
Route Stability: Route changes detected within 30-day window (isRouteStable: false)
DNSSEC: Valid
Traceroute: 29 hops, 12 timed out, first hop 0.1ms, last hop 122ms
Transit Networks: Comcast identified in path
## Historical Signal Analysis
Sixteen observations were recorded in the observation history. Key observations include:
- 2026-07-27 02:21:41 UTC: Ownership data recorded with zero ownership changes observed
- 2026-07-27 02:19:18 UTC: Geolocation signal from MaxMind GeoLite2 identified Serbia (RS), Novi Sad, Vojvodina region
- 2026-07-27 02:19:00 UTC: Blacklist listing signal detected with 2 active listings out of 8 total lists, maximum severity rated as high
- 2026-07-27 02:18:58 UTC: DNS resolution for domain sbb.rs confirmed
## Neighborhood Analysis
Subnet analysis for 188.2.120.33/24 revealed:
- Abuse Density: 0
- Neighbor Count: 0
- Risk Distribution: No high, medium, or low risk neighbors identified
- Threat Siblings: 0
## Entity Relationships
Three relationships were identified:
1. Same Network: SBBNET (2 instances)
2. DNS Association: cable-188-2-120-33.dynamic.sbb.rs
## Recommended Actions
No specific security actions were generated based on the risk profile. However, SOC teams should:
- Monitor the IP for changes in blacklist status given 2 active listings
- Investigate geolocation inconsistencies between DE and RS
- Review route stability changes for potential infrastructure reconfiguration
---
Status: No immediate blocking recommended, but ongoing monitoring advised due to blacklist listings and geolocation discrepancies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Dragoljub Spasojevic |
| ASN | AS31042 |
| Network Name | SBBNET |
| CIDR Block | 188.2.0.0/17 |
| RIR | RIPE |
| Country | RS |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | cable-188-2-120-33.dynamic.sbb.rs |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | cable-188-2-120-33.dynamic.sbb.rs |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS31042 |
| Network Prefix | 188.2.0.0/16 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 14:58:52 UTC |
| Last Seen | 2026-07-27 02:17:41 UTC |
| Profile Built | 2026-08-30 14:36:42 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 188.2.120.33
Who owns the IP address 188.2.120.33?
188.2.120.33 is registered to Dragoljub Spasojevic. The address falls within the 188.2.0.0/17 network block. Registration is held at RIPE.
Where is 188.2.120.33 located?
Geolocation data places 188.2.120.33 in Frankfurt, Vojvodina, Germany. The local time zone is Europe/Berlin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 188.2.120.33 malicious or safe?
188.2.120.33 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 188.2.120.33?
The reverse DNS (PTR) record for 188.2.120.33 is cable-188-2-120-33.dynamic.sbb.rs. This hostname is forward-confirmed, meaning it resolves back to the same address.