93.119.195.110📋 Copy

# IP Intelligence Briefing: 93.119.195.110

## Executive Summary

IP address 93.119.195.110 is classified as Low Risk with a current risk score of 0. The address is currently firewalled with no active services and no open ports. Historical data indicates mixed geolocation reports (UAE, Romania, Czech Republic) with occasional threat indicators. No established relationships or neighboring IP activity detected.

## Current Profile Assessment

Risk Classification: Low Risk (Score: 0)

Network Role: Firewalled / No Services

Network Origin: AS26383 (bgpPrefix: 93.119.195.0/24)

Route Stability: False (route changes detected)

Geolocation: Reports vary between AE (UAE), RO (Romania), and CZ (Czech Republic) with 200km accuracy radius

Ownership: No organization or ASN data populated

DNS Resolution: No PTR records, no forward resolution

Services: No open ports detected

TLS/HTTP: No certificates or web services identified

## Threat Indicators

Active Threats: None currently detected

Blacklist Status: 0 blacklist entries

Known Campaigns: None identified

Tor Exit Node: No

Spam Source: No

Known Attacker: No

Behavioral Observations:

• Honeypot hits: 0
• Enumeration strikes: 0
• WAF violations: 0
• Total incidents: 0
• Auto-banned: No

## Historical Analysis (11 Observations)

Recent signal history (July 22, 2026) shows:

• Geolocation inconsistency: Multiple conflicting reports across Romania (RO), UAE (AE), and Czech Republic (CZ) with confidence scores ranging from 0.12 to 0.75
• Threat signals: At least one observation flagged `has_threats: true` with 3 associated pulses
• Operator score: 0.1304 (Minimal risk classification)

Temporal Indicators:

• No ownership changes detected
• No persistent threat observation pattern
• Threat persistence days: 0

## Network Neighborhood Analysis

Subnet: 93.119.195.0/24

Abuse Density: 0

Neighbor Count: 0

Risk Distribution: No high/medium/low risk neighbors detected

Key Finding: No associated IP siblings or neighboring activity. The /24 subnet shows zero abuse activity.

## Relationship Graph

Direct Relationships: 0

No associated hostnames, certificates, or related entities identified.

## Control Plane Data

• Route Stability: False
• RPKI State: Not available
• DNSSEC: Valid
• DNSBL Listed: 0 (of 8 total lists)
• Hops: 11 (Comcast transit network observed)

## Recommended Actions

Immediate: No blocking required. Current risk profile indicates low threat activity.

Monitoring: Given geolocation inconsistencies and historical threat flags, implement:

1. Enhanced monitoring of outbound connections from this IP

2. Alert on any service activation (open ports, TLS certificates)

3. Monitor for changes in geolocation reports

4. Track route stability changes

Firewall Rules: No immediate rules required. Current profile shows no active services or threats.

## Intelligence Confidence

Data Confidence: Moderate

• Mixed geolocation reports with varying confidence levels (0.12-0.75)
• Zero current threat indicators but historical presence of threat flags
• Incomplete ownership data

Recommendation: Maintain current monitoring posture. IP is currently benign but warrants continued observation due to historical threat signals and geographic inconsistencies.

---

*Report generated: IPDebrief Intelligence Platform

Classification: Internal Use - SOC Intelligence*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.