171.231.199.113📋 Copy

# Intelligence Briefing: IP 171.231.199.113/32

Classification: Low Risk - Residential/ISP Infrastructure

---

## Executive Summary

IP address 171.231.199.113 is classified as Low Risk (risk score: 25/100) with current operational status showing no active threat indicators. The IP is associated with Vietnam's Viettel infrastructure under APNIC RIR jurisdiction. Current network role indicates firewalled status with no publicly accessible services. No known malicious campaigns, blacklist listings, or attacker associations detected.

---

## Profile Assessment

Risk Metrics:

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Threat Indicators: None
• Blacklist Count: 0
• DNSBL Listings: 1 of 8 total

Geolocation Data:

• Current Geolocation: US-IL, Chicago (US)
• DNS PTR Resolution: dynamic-ip-adsl.viettel.vn (Vietnam)
• GeoPlausible: false (location discrepancy noted)
• Timezone: America/Chicago

Network Classification:

• ASN: 7552 (Comcast)
• Origin Prefix: 171.231.192.0/21
• Route Stability: false
• BGP Prefix Origin: 171.231.192.0/21
• Network Role: Firewalled / No Services

DNS Configuration:

• PTR Hostnames: dynamic-ip-adsl.viettel.vn
• Forward Resolution: Confirmed to viettel.vn domain
• Email Authentication: SPF and DMARC records present
• Forward Resolution Count: 1

---

## Observation History

Analysis of 14 historical observations indicates consistent association with Vietnamese telecommunications infrastructure:

Recent Signals (July 2026):

• RIR Registry: APNIC (Asia-Pacific)
• Organization: IRT-VNNIC-AP (Vietnam Network Information Center)
• CIDR Block: 171.224.0.0/11 (Vietnam)
• Abuse Contact: hm-changed@vnnic.vn
• Network Name: VIETTEL-VN
• Geographic Location: My Dinh, Ha Noi City, Vietnam

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: false
• No sustained malicious activity detected

---

## Relationship Graph

Associated Entities:

• DNS Association: dynamic-ip-adsl.viettel.vn
• Single hostname relationship identified
• No organizational or certificate relationships detected
• No known associated subnets beyond immediate DNS resolution

---

## Neighborhood Analysis (171.231.199.0/24)

Subnet Characteristics:

• Total Neighbor IPs: 16
• Abuse Density: 0%
• Risk Distribution: 0 High, 5 Medium, 11 Low Risk

Notable Neighbors:

• 171.231.199.119: Risk Score 49 (Medium Risk)
• 171.231.199.134: Risk Score 49 (Medium Risk)
• 171.231.199.200: Risk Score 50 (Higher Risk)
• 171.231.199.211: Risk Score 40 (Medium Risk)
• 171.231.199.219: Risk Score 25 (Low Risk)
• 171.231.199.242: Risk Score 0 (Clean)
• 171.231.199.252: Risk Score 40 (Medium Risk)

Assessment: The /24 subnet shows mixed risk profiles with no systematic abuse pattern. Subject IP sits within a typical ISP residential subnet with no inherited risk elevation.

---

## Technical Observations

Services & Ports:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Server Banner: None
• Classification: Firewalled / No Services

Behavioral Indicators:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0

Traceroute Characteristics:

• Hop Count: 29
• Transit Networks: Comcast, Cogent
• Timed Out Hops: 12
• First Hop RTT: 0.2ms
• Last Hop RTT: 265ms

---

## Recommended Actions

Current Status: No immediate security actions required.

Monitoring Recommendations:

1. Monitor for DNS resolution changes (current PTR indicates Viettel Vietnam DSL)

2. Track subnet risk distribution changes

3. Watch for any service openings on previously firewalled IP

4. Monitor for blacklist additions (currently clean)

Firewall Rules: No blocking recommended. IP classified as legitimate ISP residential infrastructure with no active threat indicators.

---

## Conclusion

IP 171.231.199.113 represents typical residential/ISP infrastructure associated with Viettel Vietnam telecommunications. The low risk score, absence of threat indicators, and clean behavioral profile support continued monitoring without intervention. The geolocation discrepancy (US vs Vietnam DNS) warrants periodic verification but does not indicate malicious activity. No security actions recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.