117.1.196.41📋 Copy

# IP Intelligence Briefing: 117.1.196.41

Classification: Moderate Risk / Low Immediate Threat

Date: July 30, 2026

Analyst: SOC Operations

---

## Executive Summary

IP 117.1.196.41 is associated with Viettel-VN (ASN 7552), a Vietnamese telecommunications provider. The IP carries a risk score of 40 (Moderate Risk) but demonstrates minimal active threat indicators. No open services or malicious activity were observed. The subnet (117.1.196.0/24) is classified as clean with zero abuse density.

---

## Ownership & Geolocation

• ASN: 7552 (IRT-VNNIC-AP / Viettel-VN)
• Network: 117.1.0.0/16
• Country: Vietnam (VN)
• City: Hanoi
• RIR: APNIC
• Geolocation Accuracy: ±600km radius

---

## Threat Assessment

Risk Indicators:

• Risk Score: 40 (Moderate)
• Abuse Confidence: Not applicable
• Blacklist Count: 2 of 8 DNSBL lists
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No

Network Role:

• Infrastructure Type: Firewalled / No Services
• Is Cloud/CDN/VPN/Proxy: No
• Mobile Carrier: No

---

## Observed Services

• Open Ports: None detected
• HTTP/HTTPS: No services responding
• TLS Certificates: None
• PTR Resolution: localhost (forward confirmed: No)

---

## Observation History

Fifteen observations recorded from July 30, 2026. Key trends:

No escalation in threat signals detected. IP shows no persistent malicious behavior.

---

## Neighborhood Analysis

• Subnet: 117.1.196.0/24
• Abuse Density: 0 (Zero)
• Neighbor Count: 0
• Risk Distribution: High: 0, Medium: 0, Low: 0
• Threat Siblings: 0

The /24 subnet exhibits no malicious activity and is classified as clean.

---

## Relationships

• Network: VIETTEL-VN (4 relationships)
• DNS: localhost (4 relationships)
• Organizations/Certificates: None detected

---

## Recommended Actions

Immediate: No immediate blocking required. Current risk profile indicates low threat potential.

Monitoring:

• Monitor for emergence of open services on this IP
• Track DNS resolution changes (current PTR points to localhost)
• Watch for neighbor IP activity in 117.1.196.0/24 range

Firewall: No specific firewall rules recommended based on current risk profile. Standard network baseline rules apply.

---

## Conclusion

IP 117.1.196.41 represents a Viettel-VN infrastructure address with minimal threat indicators. The moderate risk score likely reflects historical DNSBL listings rather than active malicious behavior. No immediate defensive action required; maintain standard monitoring protocols.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.