171.231.191.15📋 Copy

# IP Intelligence Briefing: 171.231.191.15/32

Classification: Low Risk ISP Infrastructure

Date: 2026-07-28

Analyst: IPDebrief SOC Intelligence

---

## Executive Summary

IP address 171.231.191.15 is a Vietnamese ISP-allocated address within Viettel's infrastructure. The IP exhibits low-risk characteristics with no active threat indicators detected. The address is classified as a dynamic residential/business ADSL endpoint with standard ISP firewalling in place.

---

## Asset Profile

Network Ownership:

• ASN: 7552 (IRT-VNNIC-AP)
• Organization: VIETTEL-VN
• CIDR Block: 171.224.0.0/11
• RIR: APNIC
• Abuse Contact: hm-changed@vnnic.vn

Geolocation:

• Country: Vietnam (VN)
• Region: Da Nang
• Coordinates: 14.06°N, 108.28°E
• Accuracy Radius: 600km (multi-signal inference)

DNS Resolution:

• PTR Record: dynamic-ip-adsl.viettel.vn
• Forward Resolution: dynamic-ip-adsl.viettel.vn
• Hosted Domains: None
• Email Auth: SPF and DMARC records present

Network Classification:

• Role: Firewalled / No Services
• CDN: No
• Cloud: No
• VPN/Proxy: No
• Tor: No
• Hosting: No
• Mobile: No
• Residential: Dynamic residential endpoint

---

## Risk Assessment

Current Risk Score: 25/100 (Low Risk)

Threat Indicators:

• Blacklist Status: Not listed on any major DNSBLs
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None associated

Network Role: Standard ISP infrastructure with active firewalling. No open ports or services exposed. TLS certificates, HTTP services, or server banners not detected.

---

## Observation History

Total Signals Observed: 17

Observation Period: Recent (2026-07-28)

Key Historical Findings:

• Geolocation signals consistently identify Vietnam (Da Nang)
• No ownership changes detected
• No threat persistence indicators
• Threat observation count: 0
• IP is not classified as persistently malicious

Signal Confidence:

• Ownership/ASN: 90% confidence
• Geolocation: 52-70% confidence (multi-signal inference)
• Network classification: 85% confidence

---

## Network Relationships

Associated Entities (5):

• Network: VIETTEL-VN (2 associations)
• Hostnames: dynamic-ip-adsl.viettel.vn (3 DNS associations)

Certificate/Hostname Associations: None detected beyond ISP-branded dynamic DNS

---

## Neighborhood Analysis

Subnet: 171.231.191.15/24

Total Siblings: 9 active IPs

Abuse Density: 0 (low threat concentration in subnet)

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 1 (171.231.191.230, score 50)
• Low Risk: 8

Notable Neighbor: 171.231.191.230 presents elevated risk (score 50) with authority score 50. All other neighbors show risk scores between 0-25.

---

## Recommended Actions

Firewall/Routing:

• No blocking required based on current risk profile
• Monitor for service exposure changes
• Consider rate-limiting if this IP initiates high-volume connections

Monitoring Parameters:

• Track for changes in open ports or service banners
• Monitor DNS resolution changes
• Watch for blacklist additions
• Observe neighborhood IP 171.231.191.230 for correlation activities

Threat Intel:

• Maintain watchlist entry for correlation purposes
• No immediate IOC (Indicator of Compromise) generated
• Standard ISP traffic baseline expected

---

## Intelligence Conclusion

IP 171.231.191.15 represents standard Viettel ISP infrastructure in Vietnam. The low risk score, absence of threat indicators, and consistent ISP DNS resolution indicate this is legitimate residential/business endpoint traffic. No immediate defensive action required beyond standard baseline monitoring. The subnet maintains low abuse density with one elevated-risk neighbor warranting periodic review.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.