212.200.106.94 Threat Intelligence and Host Information
Mar 12, 2026
ipinfopage
General
IP Address
212.200.106.94
Location
🇷🇸 Belgrade, Serbia
Network
AS8400
Threat Score
50/100
Attack Intelligence
MITRE ATT&CK Techniques
T1192 - Spearphishing Link, T1204 - User Execution
Open Ports Detected
2000
Geographic Location
Country
Serbia
City
Belgrade
Region
Belgrade
Coordinates
44.8040, 20.4651
Network Information
ASN
AS8400
Organization
TELEKOM SRBIJA a.d.
Network
AS8400 TELEKOM SRBIJA a.d.
WHOIS Information
inetnum
212.200.106.0 - 212.200.107.255
netname
TELEKOM-NET
descr
11000 BELGRADE
country
RS
admin-c
ANAV-RIPE
tech-c
DJDJ-RIPE
status
ASSIGNED PA
mnt-by
MTS-DOO-MNT
created
2020-04-24T09:02:42Z
last-modified
2020-04-24T09:02:42Z
role
TELEKOM TECHNICAL
address
TELEKOM SRBIJA
abuse-mailbox
abuse@telekom.rs
nic-hdl
TSTE-RIPE
route
212.200.0.0/17
origin
AS8400
Attack Logs
| Date | Target Location | Protocol | Link |
|---|---|---|---|
| 2026-03-12 | Toronto, Canada | TELNET | View Log |
- Country: Serbia
- Network:
- Noticed: 29 times
- Protocols Attacked: portscan telnet
- Countries Attacked: Italy, Malaysia, United States of America
CVEs Detected
CVE-2017-20149 CVE-2018-1156 CVE-2018-1157 CVE-2018-1158 CVE-2018-1159 CVE-2018-14847 CVE-2018-5951 CVE-2018-7445 CVE-2019-13074 CVE-2019-13954 CVE-2019-13955 CVE-2019-15055 CVE-2019-16160 CVE-2019-3924 CVE-2019-3943 CVE-2019-3976 CVE-2019-3977 CVE-2019-3978 CVE-2019-3979 CVE-2019-3981 CVE-2020-10364 CVE-2020-20021 CVE-2020-20217 CVE-2020-20220 CVE-2020-20221 CVE-2020-20225 CVE-2020-20230 CVE-2020-20247 CVE-2020-20249 CVE-2020-20250 CVE-2020-20252 CVE-2020-20253 CVE-2020-20254 CVE-2020-20262 CVE-2020-20264 CVE-2020-20265 CVE-2020-20266 CVE-2020-20267 CVE-2021-3014 CVE-2021-36613 CVE-2021-36614 CVE-2022-36522 CVE-2022-45313 CVE-2022-45315 CVE-2023-30799 CVE-2023-30800 CVE-2023-32154 CVE-2025-6443
Disclaimer
This page contains threat intelligence information for the IPv4 address 212.200.106.94 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.