# IP Intelligence Briefing: 1.20.172.57
## Executive Summary
The target IP (1.20.172.57) is a low-risk address associated with TOT Mobile Co LTD (ASN 23969), a Thai mobile network operator headquartered in Pattaya, Thailand. The IP is currently firewalled with no active services, showing no malicious indicators.
## Profile Overview
- Risk Score: 25 (Low Risk)
- Organization: TOT Mobile Co LTD (ASN 23969)
- Network: 1.20.0.0/16 (APNIC registry)
- Geolocation: Thailand, Chon Buri, Pattaya (13.05°N, 100.94°E)
- Reputation: Low Risk
- Network Role: Firewalled / No Services
## Threat Indicators
No active threat indicators were identified. The IP is not flagged as a Tor exit node, known attacker, or spam source. Blacklist count stands at zero. DNSBL listing count is 1 out of 8 total lists checked.
## Network Behavior
- Open Ports: None detected
- Services: No services running (firewalled)
- DNS: No PTR hostnames; forward resolution not confirmed
- Email Auth: No SPF, DMARC, or TXT records present
- Control Plane: Origin ASN 23969; BGP prefix 1.20.172.0/22
- Stability: Provider score 0; authority score 0; stability score 0
## Historical Observation (12 signals)
Recent observations indicate subnet classification as "clean" with inherited risk of 0. Ownership changes remain at 0. No threat persistence observed. The IP has not been flagged as persistently malicious.
## Neighborhood Analysis
The /24 subnet (1.20.172.0/24) contains 2 sibling IPs:
- 1.20.172.91 (risk score: null)
- 1.20.172.233 (risk score: null)
Abuse density for the subnet is 0. Risk distribution across neighbors: high 0, medium 0, low 0.
## Relationship Graph
Two relationships identified, both classified as "Same Network" targeting TOT-MOBILE-AS-AP. No external organizational or hostname relationships detected.
## Recommended Actions
No active security actions required. The IP presents as a legitimate carrier infrastructure endpoint with no active threat profile. Standard monitoring protocols apply.
---
*Intelligence generated via IPDebrief platform. Data reflects current observation state.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | TOT Mobile Co LTD |
| ASN | AS23969 |
| Network Name | TOT-MOBILE-AS-AP |
| CIDR Block | 1.20.0.0/16 |
| RIR | APNIC |
| Country | TH |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS23969 |
| Network Prefix | 1.20.172.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 06:53:38 UTC |
| Last Seen | 2026-08-27 06:28:50 UTC |
| Profile Built | 2026-08-29 05:32:01 UTC |
| Data Freshness | Live |
| Signal Types | 13 |
| Total Observations | 14 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 1.20.172.57
Who owns the IP address 1.20.172.57?
1.20.172.57 is registered to TOT Mobile Co LTD. The address falls within the 1.20.0.0/16 network block. Registration is held at APNIC.
Where is 1.20.172.57 located?
Geolocation data places 1.20.172.57 in Pattaya, Chon Buri, Thailand. The local time zone is Asia/Bangkok. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 1.20.172.57 malicious or safe?
1.20.172.57 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 1.20.172.57 a VPN, proxy, or data center address?
1.20.172.57 is classified as a mobile network based on network ownership and behavioural analysis.