113.190.252.33
IP Intelligence Briefing: 113.190.252.33
Date: 2026-06-07
---
**1. Threat Profile**
- Risk Score: 80 (High Risk)
- Provider: IRT-VNNIC-AP (Vietnam's national internet registry)
- Geolocation: Vietnam, Hanoi (IPv4 subnet 113.160.0.0/11)
- Threat Indicators:
- No active malware campaigns or known attacker associations.
- DNSBL Listings: Flagged in 5/8 DNSBLs (e.g., Spamhaus, OpenBL) as of June 2, 2026.
- DNSSEC Valid: True, but no CAA records detected.
---
**2. Network Behavior**
- Subnet: 113.190.252.33/24
- Neighbor Risk: 1 sibling IP (113.190.252.123) with a 40 risk score (Medium Risk).
- Subnet Abuse Density: 0% (low risk for subnet-wide abuse).
- Services: No open ports, TLS, or HTTP services detected.
---
**3. Historical Observations**
- Recent Activity (June 7, 2026):
- Minimal risk score (0.15) with 2 signals.
- DNSSEC validation and route stability noted.
- Past Activity (June 2, 2026):
- Flagged in 5/8 DNSBLs (high-severity listings).
- No persistent malicious behavior detected.
---
**4. Relationships**
- Network Affiliation: Part of VNPT-VN (Vietnam Telecom) network (ASN 45899).
- Linked Entities:
- Same network peers (19 entries, all under VNPT-VN).
- No direct ties to known malicious organizations or domains.
---
**5. Recommendations**
- Monitor DNSBL Status: Track DNSBL listings (e.g., Spamhaus, OpenBL) for potential spam or phishing activity.
- Subnet-Level Analysis: Investigate neighboring IPs (e.g., 113.190.252.123) for shared infrastructure risks.
- Geolocation Validation: Confirm geolocation with additional probes due to potential spoofing.
- Network Segmentation: Consider isolating high-risk subnets (e.g., 113.190.240.0/20) if critical assets are exposed.
Note: While the IP is currently flagged as high risk, recent observations suggest diminished immediate threat. However, historical DNSBL activity warrants further investigation into potential misuse.
---
*Generated by IPDebrief. All data sourced from network intelligence and threat feeds.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-VNNIC-AP |
| ASN | AS45899 |
| Network Name | VNPT-VN |
| CIDR Block | 113.160.0.0/11 |
| RIR | APNIC |
| Country | VN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | static.vnpt-hanoi.com.vn |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | static.vnpt-hanoi.com.vn |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Multi-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | — |
| Closed Ports | 25, 443, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 21% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 13% | 1 | 1 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 18% | 8 | 10 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Fresh
| First Seen | 2026-05-15 20:46:23 UTC |
| Last Seen | 2026-06-26 18:10:25 UTC |
| Profile Built | 2026-06-26 08:17:01 UTC |
| Data Freshness | Fresh |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.