171.7.100.220📋 Copy

## IP Intelligence Briefing: 171.7.100.220/32

Executive Summary

IP address 171.7.100.220 presents a moderate risk profile (risk score: 40/100) associated with Thai telecommunications infrastructure. The address is classified as a firewalled endpoint with no active services, no open ports, and no known malicious indicators.

---

Asset Identification

---

Threat Assessment

Threat Indicators: None detected

• Blacklist count: 0
• DNSBL listings: 2 of 8 total lists
• Known campaigns: None
• Is Tor exit: No
• Known attacker: No
• Spam source: No

Network Role: Firewalled endpoint with no services detected

• Open ports: None
• TLS certificates: None
• HTTP services: None

---

Technical Observations

DNS Configuration:

• PTR hostname: mx-ll-171.7.100-220.dynamic.3bb.co.th
• Forward resolution: Unconfirmed
• Email authentication (SPF/DMARC): Not configured

Control Plane:

• BGP prefix: 171.7.0.0/17
• Route stability: Unstable
• DNSSEC: Valid
• RPKI state: Not verified

Geolocation: Multi-signal inference indicates Bangkok, Thailand (confidence: 52%)

---

Neighborhood Analysis

Subnet: 171.7.100.220/24

• Abuse density: 0 (Clean)
• Total sibling IPs: 1
• Active threat siblings: 0
• Classification: Clean

The immediate /24 subnet shows no abuse indicators or threat-adjacent neighbors.

---

Historical Signals (Last 18 Observations)

• Ownership stability: No changes detected
• Threat persistence: 0 days
• Classification trend: Consistently clean
• Geographic consistency: Stable Thailand attribution

---

Recommended Security Actions

Based on risk score 40, the following blocking rules are recommended for defensive filtering:

iptables:

```bash

iptables -A INPUT -s 171.7.100.220 -j DROP

```

nftables:

```bash

nft add rule inet filter input ip saddr 171.7.100.220 drop

```

nginx:

```nginx

deny 171.7.100.220;

```

pfSense:

```

171.7.100.220/32

```

Cloudflare WAF:

```json

{

"description": "Block 171.7.100.220 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 171.7.100.220"

}

}

```

AWS WAF:

```json

{

"Addresses": ["171.7.100.220/32"],

"Description": "IPDebrief risk 40"

}

```

---

Intelligence Notes

• The IP resolves to a Thai mobile carrier DNS hostname (3bb.co.th), indicating potential mobile network infrastructure
• No active services detected suggests this may be a reserved, management, or carrier network address
• Moderate risk score (40) warrants defensive blocking but does not indicate active malicious activity
• No correlation with known threat campaigns or attacker infrastructure
• Recommend monitoring for service activation if previously observed as firewalled

---

*Generated: IPDebrief Intelligence Platform | For SOC defensive use only*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.