# 119.73.116.166 — IP Intelligence Summary

119.73.116.166 is an IPv4 address operated by TEC-DATA CORE ENGINEERING TEAM (AS138655), geolocated to Faisalabad, Pakistan. Its reverse DNS name is static-host119-73-116-166.link.net.pk. As of October 13, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/119.73.116.166
- Last updated: 2026-10-13

## Ownership

- Organization: TEC-DATA CORE ENGINEERING TEAM
- Network name: Naqashband
- Allocated block: 119.73.112.0/20
- ASN: AS138655 (https://ipdebrief.com/asn/138655)
- Regional registry: APNIC

## Location

- City: Faisalabad
- Region: Punjab
- Country: Pakistan
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- static-host119-73-116-166.link.net.pk
- Forward-confirmed: yes

## Analyst narrative

\# IP Intelligence Briefing: 119.73.116.166

**Classification:** MODERATE RISK

**Date:** 2026-07-27

**Analyst:** IPDebrief Intelligence Team

\---

\## Executive Summary

IP address 119.73.116.166 was assessed as a MODERATE RISK endpoint with a risk score of 40. The address is assigned to TEC-DATA CORE ENGINEERING TEAM (ASN 138655) under the Naqashband network block in Faisalabad, Pakistan. No active threat indicators, blacklist listings, or malicious campaigns were observed. The IP is currently firewalled with no open services detected.

\---

\## Technical Profile

**Ownership & Registration:**

\- Organization: TEC-DATA CORE ENGINEERING TEAM

\- ASN: 138655 (Naqashband)

\- CIDR Block: 119.73.112.0/20

\- RIR: APNIC

\- DNS PTR: static-host116.73.119.link.net.pk

**Geolocation:**

\- Country: Pakistan (PK)

\- Region: Punjab

\- City: Faisalabad

\- Coordinates: 31.37°N, 73.03°E

\- Geographic validation: Plausible (consensus confirmed)

**Network Classification:**

\- Infrastructure Type: Firewalled / No Services

\- Services: No open ports detected

\- Proxy/VPN/Tor: Not identified

\- Residential/Hosting: Not classified

\---

\## Threat Assessment

**Current Risk Score:** 40 (Moderate)

**Threat Indicators:** None detected

**Blacklist Count:** 0

**Known Campaigns:** None associated

**Abuse Confidence Score:** Not available

**Spam Source:** No

**Tor Exit Node:** No

**Control Plane Analysis:**

\- Route Stability: Unstable

\- Operator Score: 0.2609 (Basic)

\- DNSBL Listings: 2 of 8 total lists

\- RPKI/Irr Consistency: Not evaluated

\- BGP Prefix: 119.73.116.0/24

\---

\## Observation History

Eighteen signal observations recorded since deployment. Key findings:

\- No ownership changes detected

\- Threat persistence: 0 days

\- Threat observation count: 0

\- No persistently malicious behavior confirmed

\- ICMP validation: Blocked (unable to validate geolocation)

Recent observations (2026-07-27) confirmed:

\- Geographic data consistent with registration

\- No service-level changes

\- Subnet classification remained "clean" with low abuse density

\---

\## Neighborhood Analysis (119.73.116.0/24)

**Subnet Classification:** CLEAN

**Abuse Density:** 0

**Total Siblings:** 34

**Active Siblings:** 7

**Threat Siblings:** 0

**Risk Distribution:**

\- High Risk: 0

\- Medium Risk: 6

\- Low Risk: 27

Notable neighbors with risk score 40: 119.73.116.8, .38, .125, .135, .149, .150, .167, .200, .224

Notable neighbors with risk score 25: .33, .38, .175, .242

\---

\## Relationship Graph

Eight relationships identified:

\- **Network Associations:** 4x Naqashband (119.73.116.0/24)

\- **DNS Associations:** 4x static-host119-73-116-166.link.net.pk

No additional organizational, certificate, or hostname relationships detected.

\---

\## Recommended Actions

**Immediate Mitigation:** Block IP at network perimeter. Recommended rules:

**iptables:**

\`\`\`

iptables -A INPUT -s 119.73.116.166 -j DROP

\`\`\`

**nftables:**

\`\`\`

nft add rule inet filter input ip saddr 119.73.116.166 drop

\`\`\`

**nginx:**

\`\`\`

deny 119.73.116.166;

\`\`\`

**Cloudflare WAF:**

\`\`\`json

{

"description": "Block 119.73.116.166 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 119.73.116.166"

}

}

\`\`\`

**AWS WAF:**

\`\`\`json

{

"Addresses": \["119.73.116.166/32"\],

"Description": "IPDebrief risk 40"

}

\`\`\`

\---

\## Intelligence Narrative

The IP address 119.73.116.166 presents a moderate risk profile suitable for defensive blocking. While no direct threat indicators were observed, the IP's classification as "firewalled" with no open services suggests it may be part of a compromised or misconfigured infrastructure. The absence of blacklist entries and known malicious campaigns indicates the risk may be probabilistic rather than confirmed malicious.

The subnet (119.73.116.0/24) maintains a clean classification with zero threat siblings, though six neighboring addresses carry medium risk scores. This suggests isolated rather than systemic abuse within the block.

**Recommendation:** Apply blocking rules at the perimeter firewall. Monitor for any service activity on the IP. If the IP begins to show open services or threat indicators, conduct deeper investigation into associated hostnames and network relationships.

\---

**Report Generated:** IPDebrief Intelligence Platform

**Data Sources:** Full profile, observation history, relationship graph, neighborhood analysis

## Nearby addresses

- 119.73.116.8 (https://ipdebrief.com/119.73.116.8)
- 119.73.116.32 (https://ipdebrief.com/119.73.116.32)
- 119.73.116.33 (https://ipdebrief.com/119.73.116.33)
- 119.73.116.38 (https://ipdebrief.com/119.73.116.38)
- 119.73.116.44 (https://ipdebrief.com/119.73.116.44)
- 119.73.116.48 (https://ipdebrief.com/119.73.116.48)
- 119.73.116.51 (https://ipdebrief.com/119.73.116.51)
- 119.73.116.58 (https://ipdebrief.com/119.73.116.58)
- 119.73.116.62 (https://ipdebrief.com/119.73.116.62)
- 119.73.116.75 (https://ipdebrief.com/119.73.116.75)
- 119.73.116.94 (https://ipdebrief.com/119.73.116.94)
- 119.73.116.102 (https://ipdebrief.com/119.73.116.102)

---

Source: IPDebrief, "119.73.116.166 IP intelligence", https://ipdebrief.com/119.73.116.166, updated 2026-10-13. Assessments are probabilistic.
