# IP INTELLIGENCE BRIEFING
Target: 171.225.205.146/32
Classification: ISP-Dynamic Residential (Vietnam)
Risk Score: 25 (Low Risk)
Date: 2026-07-24
---
## EXECUTIVE SUMMARY
IP 171.225.205.146 is a dynamic residential address belonging to Viettel Group (AS7552) in Quang Tri, Vietnam. The IP demonstrates historical threat associations but currently presents low risk (score: 25). No active services or open ports detected. The subnet exhibits no abuse density, indicating isolated historical activity.
---
## NETWORK OWNERSHIP & GEOLOCATION
- ASN: AS7552 (viettel group)
- Organization: Viettel Group
- Country: Vietnam (VN)
- Region: Quang Tri
- CIDR Block: 171.225.205.0/24
- Network Role: ISP Dynamic Residential
- Control Plane: Route stable (0 changes in 30 days), DNSSEC valid
---
## THREAT INDICATORS
- DNSBL Listings: 1 of 8 lists checked (high severity)
- Historical Threat Signals: Confirmed in recent observations
- Reputation Sources: Alienvault OTX flagged with threats
- Tor/Proxy: Negative (not a Tor exit node, not known proxy)
- Cloud/CDN: Negative (not hosted infrastructure)
- Abuse Confidence: No current active abuse confidence score
---
## OBSERVATION HISTORY (14 signals)
Recent activity shows pattern of intermittent threat associations:
- 2026-07-24 09:17: Threat indicators detected (has_threats: true, pulse_count: 1)
- 2026-07-24 09:17: Listed on 8 DNSBLs with 1 active listing (high severity)
- Geolocation: Consistent Vietnam attribution across providers
- DNS: Resolves to viettel.vn, PTR: dynamic-ip-adsl.viettel.vn
---
## RELATIONSHIP ANALYSIS
- DNS Association: dynamic-ip-adsl.viettel.vn
- Related Entities: None beyond DNS hostname
- Correlated Campaigns: No certificate or banner matches
- Campaign Likelihood: Not associated with known campaigns
---
## SUBNET ANALYSIS (171.225.205.0/24)
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- Abuse Density: 0.0 (Clean)
- Classification: Clean subnet
---
## NETWORK SERVICES
- Open Ports: None detected
- HTTP Services: None
- TLS Certificates: None
- Service Purpose: Firewalled / No Services
- Connection Type: Residential/ISP Dynamic
---
## RECOMMENDED ACTIONS
Current Risk Level: LOW (25)
Recommended: No immediate action required. Monitor for changes in threat indicators.
Firewall Considerations:
- Allow traffic if legitimate business need exists
- No specific block rules recommended
- Consider monitoring for pattern changes in future observations
---
## ANALYST NOTES
This IP represents typical ISP-dynamic residential addressing from Viettel's Vietnamese network. Historical DNSBL associations suggest past abuse activity, but current subnet abuse density is zero. The single active DNSBL listing may be stale or from historical context. Given the low risk score and clean subnet classification, no aggressive blocking is warranted. Recommend continued monitoring via automated threat feeds and correlation with internal detection systems.
Confidence Level: Medium (based on historical threat signals)
Last Updated: 2026-07-24 09:17 UTC
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-VNNIC-AP |
| ASN | AS7552 |
| Network Name | VIETTEL-VN |
| CIDR Block | 171.224.0.0/11 |
| RIR | APNIC |
| Country | VN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | dynamic-ip-adsl.viettel.vn |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | dynamic-adsl.viettel.vndynamic-ip-adsl.viettel.vn |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS7552 |
| Network Prefix | 171.225.205.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 13% | 1 | 1 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 13% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 2 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-07 06:27:14 UTC |
| Last Seen | 2026-08-27 04:22:55 UTC |
| Profile Built | 2026-08-29 06:00:45 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 171.225.205.146
Who owns the IP address 171.225.205.146?
171.225.205.146 is registered to IRT-VNNIC-AP. The address falls within the 171.224.0.0/11 network block. Registration is held at APNIC.
Where is 171.225.205.146 located?
Geolocation data places 171.225.205.146 in Haiphong, Haiphong, Vietnam. The local time zone is Asia/Ho_Chi_Minh. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 171.225.205.146 malicious or safe?
171.225.205.146 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 171.225.205.146?
The reverse DNS (PTR) record for 171.225.205.146 is dynamic-ip-adsl.viettel.vn. This hostname is not forward-confirmed, so it should be treated as a weak signal.