217.97.204.34📋 Copy

# IP Intelligence Briefing: 217.97.204.34/32

## Executive Summary

This IP address presents a Moderate Risk profile (55/100) with evidence of mobile network activity and multi-service hosting. While no confirmed threat indicators exist, the risk score warrants monitoring and consideration for defensive filtering.

---

## Network Ownership & Registration

• ASN: 5617 (M-CONNECT)
• Organization: Krzysztof Baran
• CIDR Block: 217.97.204.0/25
• RIR: RIPE
• Abuse Contact: Available via RDAP

---

## Geolocation & Network Classification

• Country: Poland (PL)
• Region: Lubusz
• City: Jasień
• Coordinates: 51.92°N, 19.15°E
• Timezone: Europe/Warsaw

Classification Flags:

• Mobile Network: Yes (Orange Polska S.A., LTE/5G, MCC: 260, MNC: 03)
• Cloud/CDN/VPN/Proxy: No
• Residential: No
• Hosting: No
• Tor Exit Node: No

---

## Service Fingerprint

• Port 80 (TCP): HTTP (lighttpd/1.4.39)
• Port 22 (TCP): SSH (dropbear, curve25519-sha256 enabled)
• DNS: Forward resolution failed
• Email Auth: No SPF/DMARC records detected
• TLS Certificate: None observed

---

## Threat Intelligence Indicators

• Blacklist Count: 0
• DNSBL Listings: 3 of 8 total lists
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

---

## Neighborhood Analysis (217.97.204.0/24)

• Subnet Abuse Density: 0 (Clean)
• Total Sibling IPs: 5
• Active Siblings: 3
• Threat Siblings: 0
• Risk Distribution: 3 medium-risk, 0 high-risk, 0 low-risk
• Notable Neighbors: 217.97.204.54, 217.97.204.62, 217.97.204.85 (all Risk 55)

---

## Observation History

• Total Observations: 15 signals
• Recent Activity: 2026-07-30
• Risk Persistence: Not persistently malicious
• Observation Types: Port scans, service banners, geolocation inference, operator scoring

---

## Control Plane Status

• BGP Prefix: 217.97.0.0/16
• Route Stability: Unstable
• RPKI State: Not validated
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)

---

## Recommended Security Actions

Immediate Recommendations

1. Increase logging verbosity and review recent activity from this IP (Risk Score: 55/100)

Firewall Rules

---

## Assessment Notes

This IP operates on a mobile network (Orange Polska) with standard web and SSH services. The moderate risk score stems from operator scoring and minimal threat signals rather than confirmed malicious activity. No correlated IPs or campaign associations detected. The subnet shows a pattern of 3 medium-risk siblings, suggesting potential coordinated activity. Monitoring is recommended, especially given the mobile network classification and multi-service hosting role.

---

*Report generated: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.