# 171.225.195.113 — IP Intelligence Summary 171.225.195.113 is an IPv4 address operated by IRT-VNNIC-AP (AS7552), geolocated to Ho Chi Minh City, Vietnam. Its reverse DNS name is dynamic-adsl.viettel.vn. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/171.225.195.113 - Last updated: 2026-10-06 ## Ownership - Organization: IRT-VNNIC-AP - Network name: VIETTEL-VN - Allocated block: 171.224.0.0/11 - ASN: AS7552 (https://ipdebrief.com/asn/7552) - Regional registry: APNIC ## Location - City: Ho Chi Minh City - Region: Ho Chi Minh - Country: Vietnam - Time zone: Asia/Ho_Chi_Minh ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - dynamic-adsl.viettel.vn - Forward-confirmed: no ## Analyst narrative \# IP Intelligence Briefing: 171.225.195.113 **Classification:** Residential Broadband / Dynamic IP **Risk Assessment:** Low (Score: 25/100) **Date of Analysis:** 2026-07-24 \--- \## EXECUTIVE SUMMARY IP 171.225.195.113 is a dynamic residential broadband address assigned to Viettel's Vietnamese ISP infrastructure. While the IP maintains a low overall risk profile (25), it exhibits notable threat indicators including DNSBL listings and historical threat signal correlation. No active services or open ports were detected. The subnet shows zero abuse density, indicating isolated behavior rather than coordinated activity. \--- \## OWNERSHIP & INFRASTRUCTURE | Attribute | Value | |-----------|-------| | **ASN** | 7552 (IRT-VNNIC-AP) | | **Organization** | VIETTEL-VN | | **CIDR Block** | 171.224.0.0/11 | | **RIR** | APNIC | | **Country** | Vietnam (VN) | | **Region** | Quang Tri | | **Network Type** | Residential / Dynamic | The IP is part of Vietnam's state-owned telecommunications provider Viettel, utilizing a large /11 address block for residential broadband services. \--- \## THREAT INDICATORS \- **DNSBL Listings:** 1/8 total listings detected \- **DNSBL Severity:** High (maximum severity rating observed) \- **Threat Signals:** Historical signals indicate threat correlation (Pulsedive risk signals present) \- **Blacklist Count:** 0 active threat feeds \- **Abuse Confidence Score:** Not applicable (residential IP) **Key Finding:** The IP appears on at least one DNSBL with high severity classification, suggesting prior abuse activity. However, current risk assessment remains low (25). \--- \## NETWORK BEHAVIOR \- **Open Ports:** None detected \- **Services:** Firewalled / No Services \- **TLS Certificate:** None \- **DNS PTR:** dynamic-adsl.viettel.vn \- **Forward Resolution:** Confirmed (viettel.vn) \- **Email Auth:** SPF and DMARC records present No active services were detected on this IP. The PTR hostname indicates dynamic residential assignment. \--- \## OBSERVATION HISTORY (16 Signals) Recent observations reveal: \- **2026-07-24 09:17:39** - AlienVault OTX signal: Threat indicators present (reputation: 0, pulse count: 1) \- **2026-07-24 09:17:32** - DNSBL listing observed (8 total lists, 1 listed, max severity: high) \- **2026-07-24 09:18:22** - Ownership signals confirmed (IRT-VNNIC-AP, VIETTEL-VN) **Temporal Analysis:** Ownership stability observed with no recent changes. Threat persistence days: 0. \--- \## NETWORK RELATIONSHIPS \- **Network Association:** VIETTEL-VN (171.225.195.0/24) \- **DNS Associations:** dynamic-adsl.viettel.vn (duplicate association) \- **Related Entities:** 3 total relationships \--- \## SUBNET ANALYSIS (171.225.195.0/24) | Metric | Value | |--------|-------| | **Abuse Density** | 0% | | **Active Siblings** | 0 | | **Threat Siblings** | 0 | | **Total Siblings** | 1 | | **Inherited Risk** | 0 | The subnet shows zero abuse density, confirming this IP operates in isolation without correlation to other abusive addresses. \--- \## TRACEROUTE ANALYSIS \- **Hop Count:** 28 \- **Transit Networks:** Comcast, NTT \- **RTT Analysis:** First hop 0.2ms, last hop 255.1ms \- **Timed Out Hops:** 17 \- **Route Stability:** Unstable (route changes: 0 in 30d) \--- \## ACTIONABLE RECOMMENDATIONS **SOC Analyst Actions:** 1. **Monitor DNSBL Activity:** Verify legitimacy of the high-severity listing. Investigate what specific blacklist(s) are listed. 2. **False Positive Assessment:** Given low risk score (25) and clean subnet, assess whether DNSBL listing is a false positive or legitimate abuse signal. 3. **Traffic Correlation:** If this IP appears in threat intelligence feeds, cross-reference with known Vietnamese threat actor infrastructure. 4. **Block Decision:** Low priority for blocking unless DNSBL listing is verified as credible threat indicator. Consider allow with logging for traffic analysis. 5. **Residential Context:** Recognize as residential broadband; false positives are common for dynamic residential IPs. **Firewall Rules:** No specific blocking rules recommended. Monitor but allow with logging. \--- **Analyst Notes:** This IP represents typical Vietnamese residential broadband. The DNSBL listing warrants investigation but does not indicate immediate threat. Subnet cleanliness and low risk score suggest isolated behavior rather than coordinated malicious activity. **Intel Confidence:** Medium (DNSBL severity conflict with low risk score) ## Nearby addresses - 171.225.195.14 (https://ipdebrief.com/171.225.195.14) - 171.225.195.93 (https://ipdebrief.com/171.225.195.93) - 171.225.195.103 (https://ipdebrief.com/171.225.195.103) - 171.225.195.239 (https://ipdebrief.com/171.225.195.239) --- Source: IPDebrief, "171.225.195.113 IP intelligence", https://ipdebrief.com/171.225.195.113, updated 2026-10-06. Assessments are probabilistic.