# 27.79.41.238 — IP Intelligence Summary

27.79.41.238 is an IPv4 address operated by IRT-VNNIC-AP (AS7552), geolocated to Da Nang, Vietnam. Its reverse DNS name is localhost. As of September 2, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/27.79.41.238
- Last updated: 2026-09-02

## Ownership

- Organization: IRT-VNNIC-AP
- Network name: VIETTEL-VN
- Allocated block: 27.64.0.0/12
- ASN: AS7552 (https://ipdebrief.com/asn/7552)
- Regional registry: APNIC

## Location

- City: Da Nang
- Region: Da Nang
- Country: Vietnam
- Time zone: Asia/Ho_Chi_Minh

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- localhost
- Forward-confirmed: no

## Analyst narrative

\# THREAT INTELLIGENCE BRIEFING

**Target IP:** 27.79.41.238/32

**Date:** 2026-07-27

**Classification:** Moderate Risk - Infrastructure IP

\## EXECUTIVE SUMMARY

IP address 27.79.41.238 is a Vietnamese infrastructure IP assigned to VIETTEL-VN (ASN 7552). The IP presents as a firewalled provider address with no active services. While no direct threat indicators are present, the moderate risk score of 40 warrants monitoring due to the IP's network classification and regional context.

\## OWNERSHIP AND GEOLOCATION

\- **Organization:** IRT-VNNIC-AP (VIETTEL-VN)

\- **Network Block:** 27.64.0.0/12 (APNIC RIR)

\- **Geolocation:** Vietnam, Da Nang region

\- **Coordinates:** 14.06°N, 108.28°E (600km accuracy radius)

\- **Registration:** APNIC registry

\## NETWORK CLASSIFICATION

\- **Type:** Network Provider Infrastructure

\- **Status:** Firewalled / No Services

\- **Open Ports:** None detected

\- **CDN/Cloud/Proxy:** Not classified as CDN, cloud, proxy, or Tor

\- **DNS:** Resolves to localhost; no forward confirmation

\## THREAT INDICATORS

\- **Risk Score:** 40 (Moderate)

\- **Abuse Confidence:** Not elevated

\- **Known Campaigns:** None identified

\- **Threat Feeds:** No matches

\- **Blacklist Status:** Listed on 2 of 8 DNSBLs

\- **Tor Exit/Attacker/Spam Source:** Negative

\## NETWORK NEIGHBORHOOD ANALYSIS (27.79.41.0/24)

\- **Total Siblings:** 33 active IPs in /24 subnet

\- **Abuse Density:** 0.03 (below-average risk)

\- **Subnet Classification:** Mostly Clean

\- **Risk Distribution:**

\- High Risk: 1 IP (27.79.41.196, score 80)

\- Medium Risk: 16 IPs

\- Low Risk: 16 IPs

\- **Inherited Risk Score:** 4 (low)

\## OBSERVATION HISTORY

\- **Total Signals:** 17 observations

\- **Recent Activity:** Multiple observations on 2026-07-27

\- **Threat Persistence:** None detected (0 days)

\- **Ownership Changes:** None recorded

\- **Not Persistently Malicious:** Confirmed

\## RELATED ENTITIES

\- **Network Associations:** VIETTEL-VN (multiple entries)

\- **DNS Associations:** localhost (all entries)

\- **External Certificates/Hostnames:** None identified

\- **Campaign Correlations:** None

\## RECOMMENDED ACTIONS

1. **Monitor** traffic patterns from this IP during peak business hours

2. **Block** or **rate-limit** if any suspicious outbound connections observed

3. **Correlate** with the high-risk neighbor 27.79.41.196 for potential lateral activity

4. **No immediate block** recommended given the IP's infrastructure classification and lack of direct threat indicators

\## ANALYST NOTES

This IP represents normal provider infrastructure in Vietnam. The moderate risk score primarily reflects regional heuristics rather than observed malicious behavior. Focus monitoring efforts on the subnet level, particularly the single high-risk sibling (27.79.41.196), for broader threat intelligence context.

## Nearby addresses

- 27.79.41.12 (https://ipdebrief.com/27.79.41.12)
- 27.79.41.18 (https://ipdebrief.com/27.79.41.18)
- 27.79.41.23 (https://ipdebrief.com/27.79.41.23)
- 27.79.41.32 (https://ipdebrief.com/27.79.41.32)
- 27.79.41.44 (https://ipdebrief.com/27.79.41.44)
- 27.79.41.45 (https://ipdebrief.com/27.79.41.45)
- 27.79.41.47 (https://ipdebrief.com/27.79.41.47)
- 27.79.41.68 (https://ipdebrief.com/27.79.41.68)
- 27.79.41.73 (https://ipdebrief.com/27.79.41.73)
- 27.79.41.76 (https://ipdebrief.com/27.79.41.76)
- 27.79.41.78 (https://ipdebrief.com/27.79.41.78)
- 27.79.41.91 (https://ipdebrief.com/27.79.41.91)

---

Source: IPDebrief, "27.79.41.238 IP intelligence", https://ipdebrief.com/27.79.41.238, updated 2026-09-02. Assessments are probabilistic.