IPDebrief

117.5.152.50

IP Intelligence Dossier
Your IP: 216.73.216.142

117.5.152.50 is an IPv4 address operated by IRT-VNNIC-AP (AS7552), geolocated to Toronto, Canada. Its reverse DNS name is localhost. As of October 24, 2026, IPDebrief rates it Moderate Risk (55/100); no anonymizing service was detected.

{ } JSON
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

Intelligence analysis of IP 117.5.152.50/32 classified the host as Moderate Risk with a score of 55. The address originated from ASN 7552, IRT-VNNIC-AP (VIETTEL-VN), registered under APNIC, with geolocation data placing the host in Toronto, Ontario, Canada. No open ports or active services were detected, and the system reported a firewall configuration preventing service enumeration. The host was flagged as a Blacklisted Host, appearing on three DNS blocklists, while DNS hygiene returned a score of 0 with no SPF, DMARC, or DNSSEC records. The surrounding subnet 117.5.152.0/24 showed an abuse density of 0.125 but assigned an inherited risk of 5. Due to elevated risk from multiple threat signals, a Block action with High severity was recommended for firewall implementation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇨🇦 Canada
RegionCA-ON
CityToronto
TimezoneAmerica/Toronto
Latitude21.02
Longitude105.85

🏢 Ownership & Registration

OrganizationIRT-VNNIC-AP
ASNAS7552
Network NameVIETTEL-VN
CIDR Block117.5.0.0/16
RIRAPNIC
CountryVN
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRlocalhost
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnameslocalhost

🔐 DNS Hygiene

Hygiene Score0% (None)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECNot signed
CAANot configured

☁️ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierUnknown — Insufficient routing data to classify
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Server—
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🛡️ Public Network Snapshot

Origin ASNAS7552
Network Prefix117.5.152.0/24
Route mappingFound

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
11
routing
25%
11
services
25%
11
ownership
0%
00
reputation
0%
00
geolocation
25%
11
Overall16%44
Coverage: 4/6 dimensions · Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-10-24 03:15:23 UTC
Last Seen2026-10-30 04:12:26 UTC
Profile Built2026-10-24 03:39:23 UTC
Data FreshnessLive
Signal Types20
Total Observations20
🔍 20 signal types · 20 observations collected
This report is generated from 20+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 📧 Enterprise Access

❓ Frequently Asked Questions About 117.5.152.50

Who owns the IP address 117.5.152.50?

117.5.152.50 is registered to IRT-VNNIC-AP. The address falls within the 117.5.0.0/16 network block. Registration is held at APNIC.

Where is 117.5.152.50 located?

Geolocation data places 117.5.152.50 in Toronto, CA-ON, Canada. The local time zone is America/Toronto. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 117.5.152.50 malicious or safe?

117.5.152.50 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 117.5.152.50?

The reverse DNS (PTR) record for 117.5.152.50 is localhost. This hostname is not forward-confirmed, so it should be treated as a weak signal.

🏘️ Related IP Addresses

Nearby addresses in 117.5.0.0/16

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.