Viettel IP Ranges
Viettel is the largest internet operator in Vietnam, and AS7552 is its main domestic network. APNIC carries the as-name as VIETEL-AS-AP, spelled with a single t, and describes the holder as Viettel Group Internet Exchange and Service Provider at an address in Nam Tu Liem district, Hanoi, with spam and abuse directed to soc@viettel.com.vn. APNIC Labs ranks it first in the country at 22,574,511 estimated users, 41.97 percent of Vietnamese internet users, ahead of VNPT on AS45899 and FPT Telecom on AS18403.
- Provider
- Viettel
- Primary ASN
- AS7552
- Category
- ISP
- Headquarters
- Hanoi, Vietnam
- Announced IPv4 prefixes
- 4086
- Registry
- APNIC
Known IP ranges
These prefixes are currently announced to the global routing table by AS7552 (VIETEL-AS-AP - Viettel Group). Prefix sets change over time - use WHOIS Lookup for the authoritative record on any specific address.
171.224.0.0/11
27.64.0.0/12
116.96.0.0/12
171.224.0.0/12
171.224.0.0/13
27.64.0.0/13
171.248.0.0/13
117.0.0.0/13
27.72.0.0/13
115.72.0.0/13
2402:800::/29
2402:800::/32
2401:d800::/32 (IPv6)
What does a Viettel IP mean in a privacy test?
A Viettel address as your visible IP means the session left through a Viettel line in Vietnam with nothing tunnelling it. Reading anything further out of the address is harder here than on most networks in this section. A reverse lookup on 27.64.100.100 and on 117.0.100.100 returns the literal string localhost, 116.96.0.1 returns nothing, and 171.224.0.1 returns dynamic-adsl.viettel.vn, which names a product and no place. The registry is nearly as flat, because Viettel holds its space as whole /11 and /12 allocations carrying only the company's Hanoi address, with very few labelled records beneath them. And Viettel traffic is not confined to this number: APNIC Labs lists AS24086, VIETTEL-AS-VN, separately as the fifth largest network in Vietnam at 1.61 percent, and route objects for Viettel's largest /11 exist under AS7552, AS24086 and AS38731 across three different routing registries.
Where Viettel's address data actually lives
Viettel publishes no geofeed and no address allowlist. Its records sit in APNIC, but the parent allocations are maintained by VNNIC, Vietnam's national internet registry, which is the detail worth knowing before you go looking. 171.224.0.0/11 registered 2011-03-04 and 27.64.0.0/12 registered 2010-04-26 both carry netname: VIETTEL-VN, status: ALLOCATED PORTABLE, mnt-by: MAINT-VN-VNNIC and mnt-irt: IRT-VNNIC-AP, so the maintainer and the incident response team of record are the registry's rather than the operator's. The one labelled child object found in sampling reverses that: 117.0.0.0/16 is ASSIGNED NON-PORTABLE with descr: ADSL HNI and mnt-by: MAINT-VN-VIETEL, Viettel's own maintainer, again with the single-t spelling. A change of maintainer rather than a change of netname is what marks the point where the registry hands control to Viettel.
What the records do not give you is granularity. The /11 and /12 parents carry no product, city or customer attribute at all, and sampled addresses inside them resolve to the parent rather than to anything smaller. Route objects are scattered across APNIC, RADB and NTTCOM, the NTTCOM copies maintained under MAINT-VIETTEL and remarked as originating from Viettel, so an origin AS read from one feed can disagree with an origin read from another. PeeringDB carries the rest: IRR as-set AS-7552, self-classified as Cable/DSL/ISP at 1-5Tbps with a selective peering policy, present at 8 exchanges across 6 facilities. One routing fact belongs with that. APNIC's August 2025 review of Vietnamese infrastructure states that two of the country's top three ISPs, Viettel and VNPT, do not currently peer at the national exchange VNIX, so domestic traffic to Viettel subscribers often takes a less direct path than a map of Vietnam would suggest.
Telling a Viettel subscriber apart from Viettel's own machines
Do not try to do this with reverse DNS. A PTR lookup on 27.64.100.100 and on 117.0.100.100 returns the name localhost, which is a placeholder rather than a description of anything; 116.96.0.1 returns nothing at all; 171.224.0.1 returns dynamic-adsl.viettel.vn, a label the whole block would carry equally. No hostname convention encodes a city, a POP, a customer or even a service type across most of this network, so a log line with a Viettel PTR in it tells you no more than the ASN already did.
What does work is reading which object covers the address and who maintains it. A block that is ASSIGNED NON-PORTABLE under MAINT-VN-VIETEL, as 117.0.0.0/16 is, has been handed to Viettel and labelled as access space. An address that resolves only to an ALLOCATED PORTABLE parent under MAINT-VN-VNNIC sits in the general pool with no published subdivision, and there are no per-customer assignment records to tell one subscriber from another. Beyond that, treat AS7552 as an eyeball network: PeeringDB's own classification is Cable/DSL/ISP and APNIC Labs measures the largest single population of end users in Vietnam behind it, so a connection from this space is far more likely a subscriber line than a rented server. Because AS24086 and AS38731 also appear as origins on Viettel prefixes, confirm which number your log tool actually resolved before treating the ASN as identifying.
Related tools
Frequently asked questions
What IP ranges does Viettel use?
Viettel announces its Vietnamese address space under AS7552, recorded by APNIC as VIETEL-AS-AP. The largest blocks currently in the routing table are listed above. They are registered as whole allocations under the netname VIETTEL-VN and maintained by MAINT-VN-VNNIC, the national internet registry's maintainer, rather than by Viettel directly.
Why does a reverse lookup on a Viettel IP return localhost?
Because large parts of Viettel's reverse DNS were never populated with real names. Sampled addresses in two separate Viettel blocks answered a PTR query with the literal string localhost, and other sampled addresses returned nothing at all. It says nothing about the connection, and it means reverse DNS will not help you place or identify a Viettel address.
Why does a Viettel address show up in my privacy test?
Because the traffic reached the site over your Viettel connection instead of through a tunnel. If you expected a VPN exit, the tunnel is not carrying that request. On a DNS leak test a Viettel result means your queries are being answered inside Viettel's network, which is the default on a Viettel line.
Is AS7552 the only Viettel network?
No. APNIC Labs lists AS24086, VIETTEL-AS-VN, separately as Vietnam's fifth largest network at 1.61 percent of users, and route objects for Viettel's largest /11 are registered against AS7552, AS24086 and AS38731 across APNIC, RADB and NTTCOM. Viettel space can therefore be seen originating from more than one number depending on which feed a tool consulted.
Does Viettel peer at Vietnam's national internet exchange?
APNIC's August 2025 review of Vietnam's internet infrastructure states that two of the top three ISPs, Viettel and VNPT, do not currently peer at VNIX. In practice that means traffic between a Viettel subscriber and another Vietnamese network can leave via transit rather than crossing the national exchange, which affects latency and traceroute paths more than it affects what a leak test reports.