# 171.243.58.156 — IP Intelligence Summary

171.243.58.156 is an IPv4 address operated by IRT-VNNIC-AP (AS7552), geolocated to Ho Chi Minh City, Vietnam. Its reverse DNS name is dynamic-ip-adsl.viettel.vn. As of October 6, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/171.243.58.156
- Last updated: 2026-10-06

## Ownership

- Organization: IRT-VNNIC-AP
- Network name: VIETTEL-VN
- Allocated block: 171.224.0.0/11
- ASN: AS7552 (https://ipdebrief.com/asn/7552)
- Regional registry: APNIC

## Location

- City: Ho Chi Minh City
- Region: Ho Chi Minh
- Country: Vietnam
- Time zone: Asia/Ho_Chi_Minh

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- dynamic-ip-adsl.viettel.vn
- Forward-confirmed: no

## Analyst narrative

\# IPDEBRIEF INTELLIGENCE BRIEFING

**Target IP:** 171.243.58.156/32

**Classification:** Residential ISP / Dynamic Assignment

**Date of Analysis:** 2026-07-25

\---

\## Executive Summary

IP 171.243.58.156 is a low-risk residential subscriber address assigned by Viettel ISP (AS7552) in Ho Chi Minh City, Vietnam. The address exhibits a current risk score of 15 and is classified as "mostly_clean" with no active open services. The IP resolves to a dynamic ADSL hostname (dynamic-ip-adsl.viettel.vn), indicating residential broadband allocation rather than infrastructure hosting.

\---

\## Technical Profile

**Network Ownership:**

\- ASN: 7552 (IRT-VNNIC-AP)

\- Organization: Viettel (VIETTEL-VN)

\- CIDR Block: 171.224.0.0/11

\- RIR: APNIC

**Geolocation:**

\- Country: Vietnam (VN)

\- City: Ho Chi Minh City

\- Region: Ho Chi Minh

\- Coordinates: 14.06°N, 108.28°E (600km accuracy radius)

**DNS Resolution:**

\- PTR: dynamic-ip-adsl.viettel.vn

\- Forward Resolution: Confirmed (1 hostname)

\- SPF/DMARC: Present

\- Reverse DNS: Verified

**Network State:**

\- Service Classification: Firewalled / No Services

\- Open Ports: None detected

\- TLS Certificate: None

\- HTTP Services: None

\---

\## Threat Indicators

**Current Risk Assessment:**

\- Risk Score: 15 (Low Risk)

\- Abuse Confidence: Not flagged

\- Known Attacker: No

\- Tor Exit Node: No

\- Spam Source: No

\- Blacklist Count: 0

**Control Plane:**

\- DNSBL Listed: 1 of 8 lists

\- Operator Score: 0.15 (Minimal)

\- Route Stability: Unstable

\- RPKI State: Not verified

\- IRR Consistency: Not verified

\---

\## Neighborhood Analysis

**Subnet:** 171.243.58.0/24

**Abuse Density:** 0.25

**Total Siblings:** 4

**Active Siblings:** 2

**Threat Siblings:** 1

**Notable Neighboring IPs:**

\- 171.243.58.21: Risk Score 15, Authority Score 50

\- 171.243.58.167: Risk Score 40, Authority Score 50 (elevated risk)

\- 171.243.58.8: No risk data available

\---

\## Observation History

**Historical Signals (16 total):**

\- Recent abuse density: 0.25

\- Classification trend: mostly_clean

\- Inherited risk: 2

\- Geo validation: Confirmed Ho Chi Minh City

\- Operator score: 0.15 (Minimal)

**Temporal Analysis:**

\- Ownership changes: 0

\- Threat persistence: 0 days

\- Persistent malicious activity: No

\- Threat observation count: 0

\---

\## Relationship Graph

**Connected Entities:**

\- Network: VIETTEL-VN (3x same network references)

\- Hostnames: dynamic-ip-adsl.viettel.vn (3x DNS associations)

\---

\## SOC Actionable Recommendations

**Firewall Rules:**

\- No immediate blocking recommended based on current risk profile

\- Monitor for outbound connections from this IP

\- Log all inbound connection attempts for 30-day baseline

**Monitoring Priorities:**

\- Watch for service activation (ports opening)

\- Monitor for DNS record changes (host name updates)

\- Track neighborhood risk escalation (particularly 171.243.58.167)

**Threat Hunting:**

\- Correlate with known Viettel residential abuse campaigns

\- Monitor for C2 beaconing from this subnet

\- Track geolocation consistency for anomaly detection

\---

**Assessment:** This IP represents standard residential ISP infrastructure with low immediate threat. No active exploitation indicators present. Routine monitoring recommended.

## Nearby addresses

- 171.243.58.6 (https://ipdebrief.com/171.243.58.6)
- 171.243.58.8 (https://ipdebrief.com/171.243.58.8)
- 171.243.58.21 (https://ipdebrief.com/171.243.58.21)
- 171.243.58.42 (https://ipdebrief.com/171.243.58.42)
- 171.243.58.167 (https://ipdebrief.com/171.243.58.167)
- 171.243.58.174 (https://ipdebrief.com/171.243.58.174)

---

Source: IPDebrief, "171.243.58.156 IP intelligence", https://ipdebrief.com/171.243.58.156, updated 2026-10-06. Assessments are probabilistic.