171.231.186.160📋 Copy

# IP Intelligence Briefing: 171.231.186.160/32

## Executive Summary

IP address 171.231.186.160 is classified as Moderate Risk (50/100). The address belongs to Viettel Group's infrastructure (ASN 7552) in Da Nang, Vietnam. Currently no active threat indicators detected, though the IP appears on 2 of 8 DNSBLs with high severity listings. The subnet demonstrates clean abuse density with no malicious sibling IPs.

## Infrastructure Profile

Ownership & Registration:

• Organization: VIETTEL-VN (IRT-VNNIC-AP)
• ASN: 7552 (Viettel Group, VN)
• CIDR Block: 171.224.0.0/11
• RIR: APNIC (allocated 2011-03-04)
• Abuse Contact: Available via RDAP

Geolocation:

• Country: Vietnam (VN)
• Region/City: Da Nang
• Coordinates: 14.06°N, 108.28°E (600km accuracy)
• Timezone: Asia/Ho_Chi_Minh

DNS Configuration:

• PTR Hostname: dynamic-ip-adsl.viettel.vn
• DNSSEC Valid: Yes
• SPF Record: Present
• DMARC Record: Present
• Forward Resolution: 1 hostname confirmed

## Threat Assessment

Current Risk Indicators:

• Risk Score: 50 (Moderate)
• Abuse Confidence: Not elevated
• Blacklist Count: 0 (profile), 2 (DNSBL listing)
• Known Campaigns: None identified
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Network Role:

• Classification: Firewalled / No Services
• Open Ports: None detected
• Cloud/CDN/Proxy: No
• Hosting: No

## Control Plane Analysis

• BGP Origin: 171.231.184.0/21
• Route Stability: False (unstable routing)
• Route Changes (30d): 0
• RPKI State: Not verified
• DNSBL Listed: 2 of 8 total lists
• Operator Score: 0

## Observation History

Total observations: 17

Recent Signals (2026-07-23):

• Geographic inference: Vietnam (52% confidence)
• DNSSEC validation: Valid
• ASN confirmation: Viettel Group, VN (85% confidence)
• Blacklist listings: 2 lists with high severity

## Network Neighborhood Analysis

Subnet: 171.231.186.0/24

• Total Siblings: 10
• Active Siblings: 4
• Abuse Density: 0 (Clean)
• Threat Siblings: 0

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 2 (171.231.186.35 @40, 171.231.186.125 @49)
• Low Risk: 7
• Clean: 171.231.186.160

## Recommended Security Actions

Based on the moderate risk profile (50), the following blocking rules are recommended:

Firewall Rules:

• iptables: `iptables -A INPUT -s 171.231.186.160 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 171.231.186.160 drop`
• nginx: `deny 171.231.186.160;`
• pfSense: `171.231.186.160/32`
• Cloudflare WAF: Block with expression `ip.src eq 171.231.186.160`
• AWS WAF: Add `171.231.186.160/32` to rule set

## Intelligence Narrative

This IP address represents a Viettel residential DSL endpoint in Da Nang, Vietnam. The moderate risk score (50) stems primarily from DNSBL listings rather than active threat indicators. The subnet demonstrates benign characteristics with zero abuse density and no threat siblings. The IP's classification as "firewalled / no services" suggests it is a terminated endpoint rather than an active server.

Threat Level: MODERATE

Recommendation: BLOCK with monitoring. The DNSBL presence warrants blocking, though the IP shows no active malicious behavior. Continuous monitoring is advised given the unstable routing state and blacklist presence.

Key Indicators:

• No active exploits or malware signatures detected
• Residential/ISP endpoint, not infrastructure server
• Geographic location consistent with registered ASN
• Neighborhood shows no correlated malicious activity

---

*Report generated: 2026-07-23*

*Data Source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.