188.246.73.160📋 Copy

# IP Intelligence Briefing: 188.246.73.160/32

Classification: High Risk / Passive Threat Actor

Date Generated: 2026-07-31

Source: IPDebrief Threat Intelligence Platform

---

## Executive Summary

IP address 188.246.73.160 is a residential/ISP-allocated address in Doboj, Bosnia and Herzegovina (BA), assigned to ASN 21107 (BLICNET). The IP carries a High Risk reputation score of 80 and is DNSBL-listed on 5 of 8 major blacklists. While currently showing no active threat indicators, the address demonstrates elevated risk characteristics consistent with residential ISP allocation patterns.

---

## Technical Profile

Ownership & Geolocation:

• ASN: 21107 (BLICNET Internet Team - Ripe)
• Network: 188.246.73.0/24
• Location: Doboj, Republika Srpska, Bosnia and Herzegovina (44.73°N, 18.09°E)
• Registration: RIR RIPE

DNS Resolution:

• PTR Record: pppoe-bb-160.poen.net
• Classification: Static PPPoE residential endpoint
• Forward Resolution: Confirmed (1 hostname)

Network Services:

• Open Ports: None detected (Firewalled)
• Active Services: None observed
• TLS/Certificates: Not applicable

---

## Threat Assessment

Risk Indicators:

• Risk Score: 80 (High Risk)
• DNSBL Listings: 5/8 blacklists
• Abuse Confidence Score: Not scored
• Known Campaigns: None detected
• Tor/Proxy: Negative on all indicators

Behavioral Analysis:

• No active threat indicators (not known attacker, not spam source)
• No Tor exit node activity
• No hosting/CDN/proxy characteristics
• Static residential assignment pattern

---

## Historical Observations

Timeline: 19 total observations recorded

Recent Subnet Context (2026-07-31):

• Subnet Abuse Density: 6.82%
• Subnet Classification: Mostly Clean
• Inherited Risk: 2
• Active Siblings: 26 of 44 total IPs
• Threat Siblings: 3 identified in subnet

Geolocation Validation:

• Status: ICMP blocked - unable to validate
• Claimed Location: Consistent with DNS PTR data
• Distance from claimed location: 1,201 km (validation inconclusive)

---

## Network Relationships

Associated Entities:

• DNS Association: pppoe-bb-160.poen.net (repeated association)
• Network Association: BLICNET (multiple network-level links)
• No Certificate Associations: None detected

Control Plane Status:

• BGP Prefix: 188.246.64.0/20
• Route Stability: Not stable (route changes detected in 30-day window)
• RPKI/Irr Status: Not validated

---

## Neighborhood Analysis

Subnet Overview (188.246.73.0/24):

• Total Neighbors: 43 IPs
• Overall Abuse Density: 2.3%
• Risk Distribution:

- High Risk: 1 IP

- Medium Risk: 30 IPs

- Low Risk: 10 IPs

Notable High-Risk Neighbors (Risk Score ≥ 70):

• 188.246.73.51 (70)
• 188.246.73.71 (80)
• 188.246.73.88 (70)
• 188.246.73.98 (70)
• 188.246.73.107 (70)
• 188.246.73.147 (70)
• 188.246.73.209 (70)
• 188.246.73.220 (70)
• 188.246.73.254 (70)

Assessment: The subnet exhibits moderate abuse density with scattered high-risk IPs. Target IP 188.246.73.160 is not among the most active threat actors in its neighborhood but carries elevated risk due to DNSBL listings.

---

## Recommended Actions

For SOC Teams:

1. Monitor, Do Not Block: IP shows passive threat characteristics without active malicious indicators

2. DNSBL Review: Investigate blacklist reasons for 5 blacklist listings

3. Contextual Analysis: Consider subnet-level patterns when making block decisions

4. Geolocation Verification: Validate claimed location if investigation requires

For Network Defenders:

• No immediate blocking required
• Monitor for changes in DNSBL status or new threat indicators
• Consider subnet-wide context in threat intelligence correlation

Classification Flags:

• Provider Score: 0 (not a hosting provider)
• Authority Score: 0 (not an authoritative entity)
• Stability: Not applicable (residential endpoint)

---

Intelligence Conclusion: IP 188.246.73.160 represents a residential/ISP endpoint with elevated risk scoring driven by DNSBL associations rather than active malicious behavior. No immediate defensive action required, but warrants inclusion in threat intelligence correlation workflows and periodic re-assessment.

Confidence Level: High (based on comprehensive data collection across all available vectors)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.