171.97.46.17📋 Copy

# IP Intelligence Briefing: 171.97.46.17

Date: Current Analysis

IP Address: 171.97.46.17/32

Risk Classification: Moderate Risk (Score: 40)

Jurisdiction: Thailand (Bangkok)

---

## Executive Summary

IP address 171.97.46.17 is associated with TrueInternet Thailand (ASN 17552) under the TRUENET-HISP network block (171.97.0.0/17). The IP shows moderate risk characteristics with no active threat indicators, no open services, and minimal DNSBL listings. The subnet demonstrates zero abuse density, indicating low malicious activity prevalence in the immediate neighborhood.

---

## Network Infrastructure Profile

Network Role: Firewalled / No Services Detected

---

## Threat Indicators

• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• DNSBL Listings: 2 of 8 total lists (minor listing activity)
• Threat Persistence: 0 days observed
• Persistently Malicious: No

---

## Service & Port Analysis

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Service Banners: None
• Cdn/Cloud/Vpn/Proxy: All negative

---

## Neighborhood Analysis (171.97.46.0/24)

The /24 subnet shows no threat activity, with zero malicious neighbors detected.

---

## Relationship Graph

The IP maintains associations with:

• DNS Hostnames: ppp-171-97-46-17.revip8.asianet.co.th (multiple entries)
• Network: TRUENET-HISP (same network associations)

Total relationship entries: 7

---

## Temporal Behavior (Observation History)

• Total Observations: 17 signals recorded
• Threat Observations: 1
• Ownership Changes: 0
• Recent Activity: Signals observed as of 2026-07-29
• Threat Persistence: Not persistent (single threat observation)

Historical data indicates stable ownership characteristics with no significant shifts in geolocation or network attribution.

---

## Control Plane Data

• Origin ASN: 17552
• BGP Prefix: 171.97.0.0/18
• RPKI State: Not specified
• IRR Consistency: Not specified
• Route Stability: False
• DNSSEC Valid: Yes
• Operator Score: 0.2609 (Basic classification)

---

## Recommended Actions

Current Risk Level: Moderate

Recommended Actions: None

Firewall Rules: Not required

Rationale: The IP shows no active threat indicators, no open services, and no malicious activity within the neighborhood context. The moderate risk score (40) appears to be driven by DNSBL listings rather than active threat behavior.

---

## SOC Analyst Notes

• Monitoring Priority: Low-Medium
• Action Required: No immediate action recommended
• Context: This appears to be a residential or ISP-managed connection from TrueInternet Thailand with no evidence of abuse or malicious activity at this time.
• Recommendation: Continue standard monitoring; no specific threat mitigation actions required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.