93.186.75.120📋 Copy

# IP Intelligence Briefing: 93.186.75.120/32

## Executive Summary

IP address 93.186.75.120 is assigned to ASN 200923 (Igor Stojkovic, Serbia) and classified as Moderate Risk (risk score: 40). The IP is currently firewalled with no active services or open ports. Geographic data indicates Belgrade, Serbia (RIPE registry), though geolocation consensus is inconsistent across sources. The address appears dormant with limited observable network activity.

## Network Classification & Ownership

• ASN: 200923
• Organization: Igor Stojkovic
• Registration: RIPE NCC
• CIDR Block: 93.186.74.0/23 (BGP origin)
• Routing Status: Route stability flagged as unstable (isRouteStable: false)
• Control Plane: Operator score 0.1304 (Minimal), operator label "Minimal"

## Threat Indicators

• Risk Score: 40 (Moderate)
• Abuse Confidence Score: Not reported
• Blacklist Status: Listed on 2 of 8 DNSBLs
• Known Threats: No Tor exit node, no known attacker indicators, no spam source designation
• Threat Feeds: No active threat feed matches
• Campaign Correlation: No certificate matches, zero correlated IPs, no banner matches

## Service & DNS Analysis

• Open Ports: None detected
• TLS Certificate: Absent
• HTTP Service: No HTTP title or banner observed
• DNS PTR: ip-93-186-75-120.oriontelekom.rs
• Forward Resolution: Single forward hostname confirmed
• Email Auth: SPF and DMARC records present for associated domain (oriontelekom.rs)

## Neighborhood Context (93.186.75.0/24)

• Subnet Classification: Mostly clean
• Abuse Density: 1 (low-moderate)
• Total Siblings: 1
• Threat Siblings: 1
• Active Siblings: 0
• Inherited Risk: 2

## Relationship Graph

• Network Associations: Multiple relationships to EWIRELESS-NET network
• DNS Associations: Multiple entries for ip-93-186-75-120.oriontelekom.rs
• Total Relationships: 29 (18 network-based, 11 DNS-based)

## Historical Observation (19 observations)

• Most Recent: 2026-06-24
• Observation Span: Multiple timestamps from June 2026
• Key Signals:

- Network classification: Mostly clean (abuse_density: 1)

- Geolocation: Novi Slankamen, Vojvodina, Serbia (proxycheck-io source)

- Ownership: No changes recorded

- Threat persistence: 0 days (not persistently malicious)

• Temporal Pattern: Single threat observation recorded; not flagged as persistently malicious

## Assessment

This IP represents a low-priority defensive concern. The Moderate Risk rating (40) primarily stems from DNSBL listings rather than active malicious behavior. No open services or ports indicate the address is currently dormant or intentionally restricted. The subnet context suggests minimal abuse activity with one threat sibling identified. Route instability warrants periodic monitoring but does not indicate immediate threat.

Recommended Actions: Standard monitoring; no immediate blocking required. Correlate with EWIRELESS-NET network for broader subnet analysis if threat sibling activity warrants investigation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.