# IP INTELLIGENCE BRIEFING
Target: 171.5.230.207/32
Classification: LOW RISK
Date: 2026-07-24
---
## EXECUTIVE SUMMARY
IP 171.5.230.207 is classified as LOW RISK with an overall risk score of 25. No threat indicators, blacklist listings, or known malicious campaigns were detected. The address belongs to a legitimate Thai telecommunications infrastructure provider with no observed malicious activity.
---
## OWNERSHIP & GEOLOCATION
- ASN: 45758
- Organization: IRT-TTBP-TH
- Network Name: TTBP-TH
- CIDR Block: 171.4.0.0/15
- RIR: APNIC
- Country: Thailand (TH)
- Region/City: Samut Songkhram
- Timezone: Asia/Bangkok
---
## NETWORK CLASSIFICATION
- Provider Score: 0
- Authority Score: 0
- Service Status: Firewalled / No Services
- Open Ports: None detected
- Is Cloud: No
- Is CDN: No
- Is VPN/Proxy: No
- Is Hosting: No
---
## DNS & EMAIL
- PTR Hostname: mx-ll-171.5.230-207.dynamic.3bb.co.th
- Forward Resolution: mx-ll-171.5.230-207.dynamic.3bb.co.th
- Email Auth: SPF: No | DMARC: No
- DNSBL Listings: 1 of 8 total lists
- Hosted Domains: 0
---
## THREAT INDICATORS
- Blacklist Count: 0
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Campaign Matches: 0
- Correlated IPs: 0
- Threat Feeds: Empty
---
## SUBNET ANALYSIS (171.5.230.0/24)
- Abuse Density: 0 (Clean)
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- Inherited Risk: 0
---
## OBSERVATION HISTORY
Total Observations: 15 signals
Recent Activity: No escalation in risk patterns
Key Historical Signals:
- 2026-07-24: Ownership registration confirmed (IRT-TTBP-TH)
- 2026-07-24: Geolocation confirmed (Thailand, Samut Songkhram)
- 2026-07-24: Subnet classification remains clean
- 2026-07-24: DNS resolution stable
Persistence Metrics:
- Threat Persistence Days: 0
- Is Persistently Malicious: No
- Ownership Changes: 0
---
## RELATIONSHIP GRAPH
Associated Entities: 6 relationships identified
- DNS Associations: mx-ll-171.5.230-207.dynamic.3bb.co.th (mail server hostname)
- Network Associations: TTBP-TH (same network)
---
## RECOMMENDED ACTIONS
Firewall/Security: No action required
Monitoring: No enhanced monitoring recommended
Threat Hunting: No additional investigation warranted
Rationale: The IP demonstrates legitimate infrastructure behavior consistent with a Thai ISP mail server. No malicious indicators, threat activity, or neighborhood contamination detected.
---
## RISK ASSESSMENT
Overall Risk Level: LOW
Confidence Level: HIGH
Action Required: NONE
*This IP represents legitimate telecommunications infrastructure with no observed threat indicators. Standard monitoring protocols apply.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-TTBP-TH |
| ASN | AS45758 |
| Network Name | TTBP-TH |
| CIDR Block | 171.4.0.0/15 |
| RIR | APNIC |
| Country | TH |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | mx-ll-171.5.230-207.dynamic.3bb.co.th |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | mx-ll-171.5.230-207.dynamic.3bb.co.th |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS45758 |
| Network Prefix | 171.5.0.0/16 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 06:54:26 UTC |
| Last Seen | 2026-08-27 04:13:46 UTC |
| Profile Built | 2026-08-29 06:03:22 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 171.5.230.207
Who owns the IP address 171.5.230.207?
171.5.230.207 is registered to IRT-TTBP-TH. The address falls within the 171.4.0.0/15 network block. Registration is held at APNIC.
Where is 171.5.230.207 located?
Geolocation data places 171.5.230.207 in Samut Songkhram, Samut Songkhram, Thailand. The local time zone is Asia/Bangkok. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 171.5.230.207 malicious or safe?
171.5.230.207 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 171.5.230.207?
The reverse DNS (PTR) record for 171.5.230.207 is mx-ll-171.5.230-207.dynamic.3bb.co.th. This hostname is forward-confirmed, meaning it resolves back to the same address.