# 171.231.186.160 — IP Intelligence Summary

171.231.186.160 is an IPv4 address operated by IRT-VNNIC-AP (AS7552), geolocated to Da Nang, Vietnam. Its reverse DNS name is dynamic-ip-adsl.viettel.vn. As of October 11, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/171.231.186.160
- Last updated: 2026-10-11

## Ownership

- Organization: IRT-VNNIC-AP
- Network name: VIETTEL-VN
- Allocated block: 171.224.0.0/11
- ASN: AS7552 (https://ipdebrief.com/asn/7552)
- Regional registry: APNIC

## Location

- City: Da Nang
- Region: Da Nang
- Country: Vietnam
- Time zone: Asia/Ho_Chi_Minh

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (0/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- dynamic-ip-adsl.viettel.vn
- Forward-confirmed: no

## Analyst narrative

\# IP Intelligence Briefing: 171.231.186.160/32

\## Executive Summary

IP address 171.231.186.160 is classified as **Moderate Risk (50/100)**. The address belongs to Viettel Group's infrastructure (ASN 7552) in Da Nang, Vietnam. Currently no active threat indicators detected, though the IP appears on 2 of 8 DNSBLs with high severity listings. The subnet demonstrates clean abuse density with no malicious sibling IPs.

\## Infrastructure Profile

**Ownership & Registration:**

\- **Organization:** VIETTEL-VN (IRT-VNNIC-AP)

\- **ASN:** 7552 (Viettel Group, VN)

\- **CIDR Block:** 171.224.0.0/11

\- **RIR:** APNIC (allocated 2011-03-04)

\- **Abuse Contact:** Available via RDAP

**Geolocation:**

\- **Country:** Vietnam (VN)

\- **Region/City:** Da Nang

\- **Coordinates:** 14.06°N, 108.28°E (600km accuracy)

\- **Timezone:** Asia/Ho_Chi_Minh

**DNS Configuration:**

\- **PTR Hostname:** dynamic-ip-adsl.viettel.vn

\- **DNSSEC Valid:** Yes

\- **SPF Record:** Present

\- **DMARC Record:** Present

\- **Forward Resolution:** 1 hostname confirmed

\## Threat Assessment

**Current Risk Indicators:**

\- **Risk Score:** 50 (Moderate)

\- **Abuse Confidence:** Not elevated

\- **Blacklist Count:** 0 (profile), 2 (DNSBL listing)

\- **Known Campaigns:** None identified

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

**Network Role:**

\- **Classification:** Firewalled / No Services

\- **Open Ports:** None detected

\- **Cloud/CDN/Proxy:** No

\- **Hosting:** No

\## Control Plane Analysis

\- **BGP Origin:** 171.231.184.0/21

\- **Route Stability:** False (unstable routing)

\- **Route Changes (30d):** 0

\- **RPKI State:** Not verified

\- **DNSBL Listed:** 2 of 8 total lists

\- **Operator Score:** 0

\## Observation History

Total observations: 17

**Recent Signals (2026-07-23):**

\- Geographic inference: Vietnam (52% confidence)

\- DNSSEC validation: Valid

\- ASN confirmation: Viettel Group, VN (85% confidence)

\- Blacklist listings: 2 lists with high severity

\## Network Neighborhood Analysis

**Subnet:** 171.231.186.0/24

\- **Total Siblings:** 10

\- **Active Siblings:** 4

\- **Abuse Density:** 0 (Clean)

\- **Threat Siblings:** 0

**Neighbor Risk Distribution:**

\- High Risk: 0

\- Medium Risk: 2 (171.231.186.35 @40, 171.231.186.125 @49)

\- Low Risk: 7

\- Clean: 171.231.186.160

\## Recommended Security Actions

Based on the moderate risk profile (50), the following blocking rules are recommended:

**Firewall Rules:**

\- iptables: \`iptables -A INPUT -s 171.231.186.160 -j DROP\`

\- nftables: \`nft add rule inet filter input ip saddr 171.231.186.160 drop\`

\- nginx: \`deny 171.231.186.160;\`

\- pfSense: \`171.231.186.160/32\`

\- Cloudflare WAF: Block with expression \`ip.src eq 171.231.186.160\`

\- AWS WAF: Add \`171.231.186.160/32\` to rule set

\## Intelligence Narrative

This IP address represents a Viettel residential DSL endpoint in Da Nang, Vietnam. The moderate risk score (50) stems primarily from DNSBL listings rather than active threat indicators. The subnet demonstrates benign characteristics with zero abuse density and no threat siblings. The IP's classification as "firewalled / no services" suggests it is a terminated endpoint rather than an active server.

**Threat Level:** MODERATE

**Recommendation:** BLOCK with monitoring. The DNSBL presence warrants blocking, though the IP shows no active malicious behavior. Continuous monitoring is advised given the unstable routing state and blacklist presence.

**Key Indicators:**

\- No active exploits or malware signatures detected

\- Residential/ISP endpoint, not infrastructure server

\- Geographic location consistent with registered ASN

\- Neighborhood shows no correlated malicious activity

\---

*Report generated: 2026-07-23*

*Data Source: IPDebrief Intelligence Platform*

## Nearby addresses

- 171.231.186.35 (https://ipdebrief.com/171.231.186.35)
- 171.231.186.56 (https://ipdebrief.com/171.231.186.56)
- 171.231.186.61 (https://ipdebrief.com/171.231.186.61)
- 171.231.186.123 (https://ipdebrief.com/171.231.186.123)
- 171.231.186.125 (https://ipdebrief.com/171.231.186.125)
- 171.231.186.156 (https://ipdebrief.com/171.231.186.156)
- 171.231.186.168 (https://ipdebrief.com/171.231.186.168)
- 171.231.186.215 (https://ipdebrief.com/171.231.186.215)
- 171.231.186.237 (https://ipdebrief.com/171.231.186.237)

---

Source: IPDebrief, "171.231.186.160 IP intelligence", https://ipdebrief.com/171.231.186.160, updated 2026-10-11. Assessments are probabilistic.