93.177.102.89📋 Copy

# INTELLIGENCE BRIEFING: 93.177.102.89

## EXECUTIVE SUMMARY

IP 93.177.102.89 presents a Low Risk profile with a risk score of 25. The IP is associated with legitimate infrastructure in Istanbul, Turkey, operating as a single-service host with minimal threat indicators. No active malicious campaigns or persistent threat activity detected.

## OWNERSHIP & INFRASTRUCTURE

• ASN: 210538 (LIR-TR-2E-TELEKOMUNIKASYON-1-MNT)
• Organization: lir-tr-2e-telekomunikasyon-1-MNT
• Network: TR-2E-TELEKOMUNIKASYON-20181122 (93.177.100.0/22)
• RIR: RIPE
• Geolocation: Istanbul, Turkey (TR)
• Timezone: Europe/Istanbul

## NETWORK CLASSIFICATION

• Role: Single-Service Host
• Cloud/CDN/Proxy: No
• Hosting Infrastructure: No
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Route Stability: Stable (isRouteStable: true)
• RPKI State: Null
• DNSSEC: Valid
• DNSBL Listed: 1 of 8 total lists

## THREAT INDICATORS

• Abuse Confidence Score: Not available
• Blacklist Count: 0
• Pulsedive Risk: Not available
• Known Campaigns: None
• Threat Feeds: Empty
• Is Persistently Malicious: False
• Threat Observation Count: 1

## SERVICE EXPOSURE

• Open Ports: 3389/TCP (RDP)
• DNS PTR: server.keyubu.com
• Forward Resolution: server.keyubu.com
• TLS Certificate: None detected
• HTTP Banner: None

## OBSERVATION HISTORY (30 Observations)

• Most Recent Signal: 2026-06-26T17:37:20 UTC
• Domain Association: keyubu.com
• CAA Records: Present (5 issuers)
• Ownership Changes: 0
• Threat Persistence: 0 days
• Signal Confidence Range: 0.20-0.85

## NETWORK NEIGHBORHOOD (93.177.102.0/24)

• Abuse Density: 0 (Clean)
• Classification: Clean
• Threat Siblings: 0
• Total Siblings: 1
• Active Siblings: 1

## RELATED ENTITIES

• DNS Hostname: server.keyubu.com (14 DNS associations)
• Network: TR-2E-TELEKOMUNIKASYON-20181122 (11 network associations)

## ASSESSMENT & RECOMMENDATIONS

Threat Level: LOW

The IP address demonstrates stable network behavior with no evidence of malicious activity. The RDP service exposure (port 3389) represents a potential attack vector but does not indicate current compromise. The single DNSBL listing suggests minor reputation concerns requiring monitoring.

Recommended Actions:

1. Monitor RDP service exposure for unauthorized access attempts

2. Review DNSBL listing context and determine if delisting is warranted

3. Continue standard threat intelligence monitoring

4. No immediate blocking recommended based on current risk profile

Risk Delta: N/A (single IP analysis)

Campaign Likelihood: None

Correlated IPs: 0

---

*Report generated based on IPDebrief intelligence platform data.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.