115.77.111.2📋 Copy

IP Intelligence Briefing: 115.77.111.2

Date: 2026-06-15

---

**1. Core Profile**

• Risk Score: 80 (High Risk)
• Owner: IRT-VNNIC-AP (Viettel, Vietnam)
• Geolocation: Ho Chi Minh City, Vietnam (APNIC registry)
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services)
• Threat Indicators:

- 5 DNSBL listings (moderate confidence)

- No known malware campaigns, spam, or Tor activity

• Control Plane:

- ASN 7552 (Viettel)

- DNSSEC valid, no CAA records

- Low operator score (0.13)

---

**2. Observation History**

• Recent Activity (30 days):

- 17 observations, primarily DNSBL flags (8 lists) and geolocation inference.

- No new threat indicators or scans detected.

- Risk score has remained stable at 80.

---

**3. Relationships**

• Network Associations:

- Linked to Viettel’s network (AS7552) and subnet 115.77.64.0/18.

- DNS PTR records point to `adsl.viettel.vn` (Viettel’s public domain).

• Email Security:

- SPF and DMARC records present, but no email authentication data.

---

**4. Neighborhood Analysis**

• Subnet: 115.77.111.2/24
• Abuse Density: 0% (clean subnet)
• Neighbors: No active IPs detected in the subnet.

---

**5. Threat Context**

• DNSBL Listings: The IP is flagged on 5/8 DNSBLs (e.g., Spamhaus, OpenBLAST), suggesting potential spam or abuse activity.
• No Active Threats: No recent scans, malware campaigns, or reconnaissance detected.
• Viettel Infrastructure: Likely a legitimate corporate IP, but DNSBL flags warrant closer inspection.

---

**6. Recommended Actions**

• Monitor DNSBL Status: Investigate why this IP is listed and verify if it’s a false positive.
• Block Based on Risk: Consider blocking the IP due to high risk score and DNSBL flags.
• Check Subnet: Since the subnet is clean, focus on isolating this IP’s traffic.
• Validate Ownership: Confirm Viettel’s stance on the IP’s usage and verify if it’s a misconfigured or compromised asset.

---

Conclusion: This IP is owned by Viettel but is flagged on multiple DNSBLs, indicating potential misuse. While no active threats are detected, its high risk score and DNSBL listings justify further investigation and network segmentation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.