180.93.228.187📋 Copy

# IP INTELLIGENCE BRIEFING: 180.93.228.187

Classification: Moderate Risk | Risk Score: 55/100 | Date: 2026-07-30

---

## Executive Summary

IP address 180.93.228.187 originates from Vietnam via ASN 7602 (IRT-VNNIC-AP, SPT-VN). The IP demonstrates moderate risk with a score of 55/100. No active threat indicators detected, but three DNSBL listings and elevated risk classification warrant monitoring. The /24 subnet is classified as clean with zero abuse density and no threat siblings.

---

## Infrastructure Profile

Network Classification: No open ports detected. No TLS certificates, HTTP services, or email authentication (SPF/DMARC) configured.

---

## Threat Assessment

Threat Indicators:

• No known campaigns or threat feeds associated
• Not identified as Tor exit node, known attacker, or spam source
• Blacklist count: 0
• DNSBL listings: 3 of 8 total lists

Risk Factors:

• Elevated risk score (55/100) triggers monitoring recommendation
• DNSBL presence indicates historical or current reputation concerns
• No persistent malicious behavior observed

---

## Geolocation & Network Signals

Geolocation data from multiple sources confirms Vietnam origin. RTT metrics are plausible for Vietnamese infrastructure.

---

## Neighborhood Analysis

Subnet: 180.93.228.187/24

• Abuse Density: 0.0 (clean)
• Threat Siblings: 0
• Active Siblings: 0
• Classification: Clean

No neighboring IPs detected in immediate vicinity. Subnet shows no inherited risk from adjacent addresses.

---

## Relationship Graph

All detected relationships map to "Same Network" (SPT-VN). No external associations with organizations, hostnames, or certificates identified.

---

## Temporal Analysis

• Observation Count: 13 historical signals
• Ownership Changes: 0 (stable)
• Threat Persistence: 0 days
• Persistently Malicious: No

Recent observations (2026-07-30) show clean classification and consistent geolocation signals.

---

## Recommended Actions

Priority: Monitor / Consider Blocking

Firewall Rules:

• iptables: `iptables -A INPUT -s 180.93.228.187 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 180.93.228.187 drop`
• nginx: `deny 180.93.228.187;`
• Cloudflare WAF: Block expression: `ip.src eq 180.93.228.187`
• AWS WAF: `Addresses: ["180.93.228.187/32"]`

Rationale: Elevated risk score (55/100) with DNSBL presence warrants proactive blocking or enhanced logging and monitoring.

---

## Intelligence Conclusion

This IP represents Vietnamese infrastructure from a legitimate provider (IRT-VNNIC-AP) but carries moderate risk due to DNSBL listings and elevated risk classification. The clean neighborhood and stable ownership suggest this may be an isolated incident rather than coordinated malicious activity. Recommend blocking or monitoring based on operational tolerance thresholds.

Status: Actionable intelligence for defensive security operations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.