171.231.182.136📋 Copy

# IP Intelligence Briefing: 171.231.182.136

Classification: Low Risk / Residential ISP Infrastructure

Date: 2026-07-25

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

The target IP address 171.231.182.136 is a Vietnamese residential broadband address belonging to Viettel Corp. The IP presents a low-risk profile with a risk score of 25/100. No active threat indicators were detected during analysis, and the address shows no evidence of malicious activity. The IP is classified as firewalled with no open services.

---

## Network Ownership & Infrastructure

Organization: IRT-VNNIC-AP (Vietnam Internet Registration and Management Authority)

ASN: 7552

Network Block: 171.224.0.0/11

Country: Vietnam (VN)

City: Da Nang

Region: Da Nang

DNS PTR: dynamic-adsl.viettel.vn

The IP is part of Viettel's residential broadband infrastructure. The dynamic hostname pattern indicates a customer-facing consumer broadband address rather than enterprise infrastructure.

---

## Risk Assessment

Overall Risk Score: 25/100 (Low Risk)

Provider Score: 0/50

Authority Score: 0/50

Stability Score: 0/50

Risk Indicators:

• No active threat indicators detected
• Not classified as Tor exit node, proxy, CDN, or hosting service
• No known attacker attribution
• No spam source classification
• Zero blacklists matched during scan (0/8)

Control Plane Observations:

• Route stability flagged as unstable
• DNSSEC validation: Valid
• Operator score: 0.1304 (Minimal)
• DNSBL listing count: 1 (minor listing)

---

## Network Neighborhood Analysis

Subnet: 171.231.182.0/24

Total Siblings: 8

Abuse Density: 0.25 (Low-Moderate)

Classification: Mixed

Neighbor Risk Distribution:

• High Risk: 0 IPs
• Medium Risk: 2 IPs
• Low Risk: 5 IPs

Notable Neighbors:

• 171.231.182.74 (Risk: 49/100) - Medium risk
• 171.231.182.206 (Risk: 50/100) - Medium risk
• 171.231.182.136 (Risk: 25/100) - Target IP

The subnet shows mixed usage patterns with two medium-risk siblings detected. No high-risk concentration observed.

---

## Observation History

Total Signals Observed: 17

Time Range: Recent monitoring period

Threat Observations: 1 (non-persistent)

Ownership Changes: 0

Key Historical Signals:

• Geolocation consistently resolved to Vietnam (Da Nang region)
• One threat observation recorded
• No persistent malicious activity detected
• Subnet abuse density maintained at 0.25

The IP shows stable ownership with no history of persistent malicious behavior.

---

## Relationships & Connections

Total Relationships Identified: 10

Network Associations: 5 relationships to VIETTEL-VN network

DNS Associations: 5 relationships to dynamic-adsl.viettel.vn

The IP demonstrates expected DNS associations for a residential broadband connection. No anomalous relationships to external threat actors or malicious infrastructure were detected.

---

## Technical Observations

Services: None detected (Firewalled / No Services)

Open Ports: None

TLS Certificates: None

HTTP/HTTPS: No active web services

Email Authentication:

• SPF: Configured
• DMARC: Configured
• Domain: viettel.vn

Fingerprinting:

• No HTTP headers indicating specific application servers
• No HSTS or CSP headers present
• Standard residential broadband behavior

---

## Threat Indicators Summary

• Is Tor Exit Node: No
• Is Known Attacker: No
• Is Spam Source: No
• Blacklist Count: 0
• Associated Campaigns: None
• Cert Matches: 0
• Banner Matches: 0

---

## Recommendations

Immediate Actions: None required. The IP presents no active threat indicators and shows standard residential broadband behavior.

Monitoring Considerations:

• Continue monitoring subnet 171.231.182.0/24 for emerging threat patterns
• Two medium-risk neighbors (171.231.182.74, 171.231.182.206) warrant periodic review
• Route stability issues may indicate infrastructure changes

Firewall Rules: No blocking recommended. The IP is a legitimate residential infrastructure address with low-risk classification.

---

## Conclusion

IP 171.231.182.136 is a legitimate Vietnamese residential broadband address with no active malicious indicators. The low risk score (25/100), absence of threat indicators, and stable ownership profile indicate this should be treated as normal consumer traffic. No defensive actions are currently warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.