171.224.177.11📋 Copy

# IP Intelligence Briefing: 171.224.177.11

## Executive Summary

IP address 171.224.177.11 is a Vietnamese residential ISP endpoint under VIETTEL-VN (ASN 7552) with a moderate risk score of 55/100. The address is assigned to IRT-VNNIC-AP within the APNIC RIR registry. No active malicious indicators were detected during analysis, but the IP is listed on three DNSBLs and exhibits elevated risk scoring. Recommended action: implement monitoring controls and consider blocking pending SOC review.

## Ownership and Geolocation

• Organization: IRT-VNNIC-AP (VIETTEL-VN)
• ASN: 7552
• Country: Vietnam (VN)
• City: Hanoi
• CIDR Block: 171.224.0.0/11
• Network Role: Residential ISP endpoint
• Service Purpose: Firewalled / No Services

## Threat Indicators

• Risk Score: 55/100 (Moderate Risk)
• Abuse Confidence: Not explicitly flagged as known attacker or spam source
• Blacklist Status: Listed on 3 of 8 DNSBLs
• Tor Exit Node: No
• Known Campaigns: None identified
• Threat Persistence: Not persistently malicious (0 threat observation days)

## Network Services and Ports

• Open Ports: None detected
• HTTP/TLS: No services exposed
• PTR Record: dynamic-adsl.viettel.vn
• Forward Resolution: dynamic-adsl.viettel.vn

## Control Plane Analysis

• BGP Prefix: 171.224.177.0/24
• Route Stability: Unstable
• RPKI State: Not validated
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)
• Delegation Age: Unable to determine

## Neighborhood Context

• Subnet: 171.224.177.0/24
• Abuse Density: 0
• Threat Siblings: 0
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 0

The /24 subnet shows minimal abuse activity with no neighboring IPs flagged as high risk.

## Observation History

Sixteen signal observations were recorded across recent monitoring windows. Key signals include:

• Geolocation: Consistent Vietnam (VN) classification with Hanoi city data
• Ownership: Stable with no ownership changes
• Operator Score: Consistent minimal classification (0.1304)
• Threat Activity: No persistent malicious behavior detected

## Related Entities

• Network: VIETTEL-VN (2 relationships)
• DNS Hostnames: dynamic-adsl.viettel.vn (2 relationships)

## Recommended Security Actions

Monitoring

• Increase logging verbosity for traffic from this IP
• Review recent activity patterns for anomalous behavior

Firewall Rules

iptables:

```bash

iptables -A INPUT -s 171.224.177.11 -j DROP

```

nftables:

```bash

nft add rule inet filter input ip saddr 171.224.177.11 drop

```

nginx:

```nginx

deny 171.224.177.11;

```

pfSense:

```

171.224.177.11/32

```

Cloudflare WAF:

```json

{

"description": "Block 171.224.177.11 — IPDebrief risk score 55",

"action": "block",

"filter": {

"expression": "ip.src eq 171.224.177.11"

}

}

```

AWS WAF:

```json

{

"Addresses": ["171.224.177.11/32"],

"Description": "IPDebrief risk 55"

}

```

## Assessment

This IP represents a Vietnamese residential endpoint from a major ISP (Viettel). While no active attack indicators were detected, the moderate risk score (55/100) and DNSBL listings warrant defensive blocking or strict monitoring. The subnet shows minimal abuse density, suggesting this IP may be flagged for specific activity patterns not captured in the current profile. SOC analysts should correlate this IP with any recent traffic anomalies before implementing blocking controls.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.