# 171.231.188.105 — IP Intelligence Summary

171.231.188.105 is an IPv4 address operated by IRT-VNNIC-AP (AS7552), geolocated to Da Nang, Vietnam. Its reverse DNS name is dynamic-ip-adsl.viettel.vn. As of September 28, 2026, IPDebrief rates it Moderate Risk (65/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/171.231.188.105
- Last updated: 2026-09-28

## Ownership

- Organization: IRT-VNNIC-AP
- Network name: VIETTEL-VN
- Allocated block: 171.224.0.0/11
- ASN: AS7552 (https://ipdebrief.com/asn/7552)
- Regional registry: APNIC

## Location

- City: Da Nang
- Region: Da Nang
- Country: Vietnam
- Time zone: Asia/Ho_Chi_Minh

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (65/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- dynamic-ip-adsl.viettel.vn
- Forward-confirmed: no

## Analyst narrative

\# IPDebrief Intelligence Briefing

**Target:** 171.231.188.105/32

**Date:** 2026-07-24

**Classification:** Moderate Risk

\---

\## Executive Summary

IP 171.231.188.105 presents a moderate risk profile (Risk Score: 40). The address is geolocated to Chicago, IL, US, but DNS resolution points to Vietnam (viettel.vn), indicating geo-inconsistency. The IP shows no active services and is currently firewalled with no open ports. Recent observations indicate stable, low-threat behavior with no persistent malicious activity detected.

\---

\## Risk Assessment

| Metric | Value | Assessment |

|--------|-------|------------|

| Risk Score | 40 | Moderate |

| Provider Score | 0 | Neutral |

| Authority Score | 0 | Neutral |

| Operator Score | 0.1304 | Minimal |

| DNSBL Listed | 2/8 lists | Low |

| Abuse Confidence | None detected | Low |

\---

\## Technical Profile

\- **Control Plane:** Origin ASN 7552, BGP Prefix 171.231.184.0/21

\- **Routing:** Route stability flagged as false; 5 timed-out hops in traceroute

\- **Transit Networks:** Comcast, Cogent

\- **DNS:** PTR resolves to dynamic-ip-adsl.viettel.vn; forward resolution unconfirmed

\- **Services:** None detected (firewalled); no open ports, TLS, or HTTP services

\- **Email Auth:** SPF and DMARC records present

\---

\## Threat Indicators

\- **Known Attacker:** No

\- **Tor Exit Node:** No

\- **Spam Source:** No

\- **Campaign Correlation:** None detected

\- **Threat Feeds:** Empty

\- **Blacklist Count:** 0

\---

\## Historical Behavior (41 Observations)

Recent signal history indicates stable operational patterns:

\- Operator scores consistently rated "Minimal" across multiple observations

\- No escalation in threat indicators observed

\- No persistent malicious behavior detected

\- Ownership stability: No changes recorded

\---

\## Network Context

**Subnet Analysis (171.231.188.0/24):**

\- Total Siblings: 10

\- Abuse Density: 0%

\- Risk Distribution: 1 medium, 9 low

\- **Notable Neighbor:** 171.231.188.131 (Risk Score: 40) — similar profile

**Relationship Graph:**

\- 36 DNS associations, all resolving to dynamic-ip-adsl.viettel.vn

\- Indicates dynamic IP allocation within Viettel infrastructure

\---

\## Recommended Actions

1. **Traffic Monitoring:** Maintain monitoring for outbound connections; current services are inactive

2. **Geo-validation:** Investigate geo-discrepancy between US geolocation and Vietnamese DNS records

3. **Subnet Awareness:** Monitor 171.231.188.0/24 subnet for coordinated activity; 171.231.188.131 shows similar risk profile

4. **Firewall Rules:** No specific blocking required based on current risk profile

5. **Email Validation:** SPF/DMARC records present; monitor for abuse

\---

\## Analyst Notes

The IP exhibits characteristics typical of dynamic residential or small business infrastructure. DNS misalignment between geolocation and hostname warrants periodic validation. Low abuse density in the /24 subnet suggests localized activity rather than coordinated campaign infrastructure. No immediate threat action required; continue passive monitoring.

## Nearby addresses

- 171.231.188.39 (https://ipdebrief.com/171.231.188.39)
- 171.231.188.44 (https://ipdebrief.com/171.231.188.44)
- 171.231.188.52 (https://ipdebrief.com/171.231.188.52)
- 171.231.188.54 (https://ipdebrief.com/171.231.188.54)
- 171.231.188.76 (https://ipdebrief.com/171.231.188.76)
- 171.231.188.78 (https://ipdebrief.com/171.231.188.78)
- 171.231.188.81 (https://ipdebrief.com/171.231.188.81)
- 171.231.188.88 (https://ipdebrief.com/171.231.188.88)
- 171.231.188.96 (https://ipdebrief.com/171.231.188.96)
- 171.231.188.110 (https://ipdebrief.com/171.231.188.110)
- 171.231.188.131 (https://ipdebrief.com/171.231.188.131)
- 171.231.188.141 (https://ipdebrief.com/171.231.188.141)

---

Source: IPDebrief, "171.231.188.105 IP intelligence", https://ipdebrief.com/171.231.188.105, updated 2026-09-28. Assessments are probabilistic.