183.80.167.41📋 Copy

# IP Intelligence Briefing: 183.80.167.41/32

## Executive Summary

The IP address 183.80.167.41/32 is associated with IRT-VNNIC-AP (ASN 18403) in Hanoi, Vietnam. The IP maintains a low-risk profile with a risk score of 15. The subnet shows no abuse density and no active threat siblings.

## Technical Profile

Ownership & Classification:

• Organization: IRT-VNNIC-AP
• ASN: 18403
• RIR: APNIC
• Network Role: Firewalled / No Services Detected
• CIDR Block: 183.80.167.0/24

Geolocation:

• Country: Vietnam (VN)
• Region: Hanoi
• Timezone: Asia/Ho_Chi_Minh

Network Status:

• Open Ports: None detected
• DNS PTR Resolution: Confirmed (41.167.80.183.in-addr.arpa)
• Reverse DNS: No hostnames resolved
• Hosted Domains: None

Threat Indicators:

• Blacklist Count: 8 total lists (2 active listings)
• DNSBL Status: 1 listing
• Max Severity: High
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Campaigns: None detected

## Observed History

The intelligence system recorded 15 observations across multiple dimensions. Recent activity included:

• 2026-06-25: Multiple blacklist listings detected with high severity ratings
• 2026-06-05: Network classification confirmed as non-cloud, non-VPN, non-hosting infrastructure
• Geographic consistency maintained across observation periods with Vietnam as the consistent location
• No evidence of persistent malicious behavior or threat persistence

## Network Relationships

The IP maintains 10 relationships with entities labeled as "FPTDYNAMICIP-NET," indicating association with FPT Dynamic IP infrastructure. No organizational or hostname relationships were identified beyond network-level connections.

## Neighborhood Analysis

Subnet analysis of 183.80.167.0/24 revealed:

• Abuse Density: 0.0 (clean)
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Classification: Clean

The subnet demonstrates no inherited risk from neighboring addresses.

## Recommended Actions

Given the low-risk profile (score: 15) and clean neighborhood status, no immediate blocking actions were recommended. The IP should be monitored for any changes in listing status or emerging threat indicators. Standard logging is advised without implementing restrictive firewall rules at this time.

## Risk Assessment

The IP address presents minimal threat to defensive operations. While DNS blacklist presence indicates some prior activity, the overall risk score of 15 and absence of active threat indicators suggest benign or historical usage. No correlation with known malicious campaigns was detected.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.