171.243.58.156📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

Target IP: 171.243.58.156/32

Classification: Residential ISP / Dynamic Assignment

Date of Analysis: 2026-07-25

---

## Executive Summary

IP 171.243.58.156 is a low-risk residential subscriber address assigned by Viettel ISP (AS7552) in Ho Chi Minh City, Vietnam. The address exhibits a current risk score of 15 and is classified as "mostly_clean" with no active open services. The IP resolves to a dynamic ADSL hostname (dynamic-ip-adsl.viettel.vn), indicating residential broadband allocation rather than infrastructure hosting.

---

## Technical Profile

Network Ownership:

• ASN: 7552 (IRT-VNNIC-AP)
• Organization: Viettel (VIETTEL-VN)
• CIDR Block: 171.224.0.0/11
• RIR: APNIC

Geolocation:

• Country: Vietnam (VN)
• City: Ho Chi Minh City
• Region: Ho Chi Minh
• Coordinates: 14.06°N, 108.28°E (600km accuracy radius)

DNS Resolution:

• PTR: dynamic-ip-adsl.viettel.vn
• Forward Resolution: Confirmed (1 hostname)
• SPF/DMARC: Present
• Reverse DNS: Verified

Network State:

• Service Classification: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None

---

## Threat Indicators

Current Risk Assessment:

• Risk Score: 15 (Low Risk)
• Abuse Confidence: Not flagged
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0

Control Plane:

• DNSBL Listed: 1 of 8 lists
• Operator Score: 0.15 (Minimal)
• Route Stability: Unstable
• RPKI State: Not verified
• IRR Consistency: Not verified

---

## Neighborhood Analysis

Subnet: 171.243.58.0/24

Abuse Density: 0.25

Total Siblings: 4

Active Siblings: 2

Threat Siblings: 1

Notable Neighboring IPs:

• 171.243.58.21: Risk Score 15, Authority Score 50
• 171.243.58.167: Risk Score 40, Authority Score 50 (elevated risk)
• 171.243.58.8: No risk data available

---

## Observation History

Historical Signals (16 total):

• Recent abuse density: 0.25
• Classification trend: mostly_clean
• Inherited risk: 2
• Geo validation: Confirmed Ho Chi Minh City
• Operator score: 0.15 (Minimal)

Temporal Analysis:

• Ownership changes: 0
• Threat persistence: 0 days
• Persistent malicious activity: No
• Threat observation count: 0

---

## Relationship Graph

Connected Entities:

• Network: VIETTEL-VN (3x same network references)
• Hostnames: dynamic-ip-adsl.viettel.vn (3x DNS associations)

---

## SOC Actionable Recommendations

Firewall Rules:

• No immediate blocking recommended based on current risk profile
• Monitor for outbound connections from this IP
• Log all inbound connection attempts for 30-day baseline

Monitoring Priorities:

• Watch for service activation (ports opening)
• Monitor for DNS record changes (host name updates)
• Track neighborhood risk escalation (particularly 171.243.58.167)

Threat Hunting:

• Correlate with known Viettel residential abuse campaigns
• Monitor for C2 beaconing from this subnet
• Track geolocation consistency for anomaly detection

---

Assessment: This IP represents standard residential ISP infrastructure with low immediate threat. No active exploitation indicators present. Routine monitoring recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.