## INTELLIGENCE BRIEFING: 178.73.65.168/32
Date: Current
Classification: Moderate Risk
Analyst: IPDebrief Intelligence Platform
---
EXECUTIVE SUMMARY
IP 178.73.65.168 is a moderate-risk (score: 65) residential broadband endpoint located in Riyadh, Saudi Arabia. The address is associated with Mobily Broadband infrastructure (ASN 35819, RIR: RIPE) and is currently firewalled with no active services. The IP shows historical scanning activity and is listed on 3 of 8 DNSBLs, warranting continued monitoring.
---
GEOGRAPHIC & NETWORK ATTRIBUTES
| Attribute | Value |
|---|---|
| Country | Saudi Arabia (SA) |
| Region/City | Riyadh Region, Riyadh |
| ASN | 35819 |
| BGP Prefix | 178.73.64.0/22 |
| Organization | BAFN-MNT / MOBILY-BROADBAND-HU |
| Abuse Contact | abuse@mobily.com.sa |
| RIR | RIPE |
---
THREAT INDICATORS
- Risk Score: 65 (Moderate)
- DNSBL Status: Listed on 3 of 8 threat feeds
- Operator Score: 0.1304 (Minimal)
- Threat Indicators: None currently active
- Known Campaigns: None associated
- Campaign Likelihood: Not assessed
Historical Activity: Signal observation history indicates prior port scanning and reconnaissance activity. Recent observations (July 2026 timeframe) show continued probe activity against the address.
---
NETWORK STATE
- Service Status: Firewalled / No Services Detected
- Open Ports: None
- DNS Resolution: Not forward-resolving
- PTR Hostnames: None registered
- Route Stability: Unstable (route changes detected)
---
NEIGHBORHOOD ANALYSIS
- Subnet: 178.73.65.168/24
- Abuse Density: 0%
- Threat Siblings: 0
- Active Siblings: 0
- Neighbor Count: 0
No correlated threat activity detected within the immediate /24 subnet.
---
RELATIONSHIP GRAPH
No associated relationships discovered (hostnames, organizations, certificates, or correlated IPs).
---
RECOMMENDATIONS
1. Monitor: Continue monitoring for service activation or behavioral changes.
2. Block Threshold: Consider blocking if scanning or connection attempts occur from this IP.
3. Allow with Logging: If traffic is legitimate, allow but log all connections for forensic analysis.
4. Geo-Filter: Evaluate geographic filtering policies for Riyadh-based residential traffic based on organizational requirements.
---
CONFIDENCE
- Overall Confidence: Moderate
- Data Sufficiency: Adequate for baseline assessment
- Observation Count: 10 historical observations recorded
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | BAFN-MNT |
| ASN | AS35819 |
| Network Name | MOBILY-BROADBAND-HU |
| CIDR Block | 178.73.64.0/22 |
| RIR | RIPE |
| Country | SA |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-30 11:03:28 UTC |
| Last Seen | 2026-08-01 04:25:20 UTC |
| Profile Built | 2026-07-31 02:07:26 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 15 |
Full dossier details are available via our API.