VNPT IP Ranges
VNPT is Vietnam's state-owned Posts and Telecommunications Group, and AS45899 is the autonomous system most of its Vietnamese internet traffic leaves from. APNIC holds the record, filed under the AS name VNPT-AS-VN for VNPT Corp at an address on Huynh Thuc Khang street in Hanoi and last modified in November 2017. The address blocks behind it are registered with the netname VNPT-VN to Vietnam Posts and Telecommunications Group, and the maintainer on them is MAINT-VN-VNNIC, which belongs to Vietnam's national registry rather than to VNPT itself.
- Provider
- VNPT
- Primary ASN
- AS45899
- Category
- ISP
- Headquarters
- Hanoi, Vietnam
- Announced IPv4 prefixes
- 3414
- Registry
- APNIC
Known IP ranges
These prefixes are currently announced to the global routing table by AS45899 (VNPT-AS-VN - VNPT Corp). Prefix sets change over time - use WHOIS Lookup for the authoritative record on any specific address.
113.178.0.0/16
113.190.0.0/16
14.240.0.0/16
14.190.0.0/16
113.170.0.0/16
14.178.0.0/16
123.19.0.0/16
123.25.0.0/16
14.232.0.0/16
222.255.0.0/16
2001:ee2::/32
2001:ee1::/32
2001:ee0::/32 (IPv6)
What does a VNPT IP mean in a privacy test?
An address here means the session left through VNPT inside Vietnam with nothing tunnelling it, so a leak test that surfaces one while a VPN is connected has found the real line. The obvious next step, a reverse lookup, is a dead end on this network: addresses sampled in 113.178.0.0/16, 14.240.0.0/16, 222.255.0.0/16 and 113.190.0.0/16 all answered with exactly the same string, static.vnpt.vn. The word static in that name describes nothing about the address itself; it is one flat record served across the space, so it cannot separate a home fibre line from a business circuit, or one province from another. A registry lookup narrows it no further, because those blocks all sit under the same /11 allocation object rather than under per-customer assignments. With both of the usual identification routes flat, the origin ASN is the only field left that varies.
What VNPT publishes about its own space
VNPT publishes no RFC 8805 geofeed. The APNIC objects covering this space carry a country: VN field and nothing finer, and no geofeed: attribute appears on them. What VNPT does maintain is IRR routing data, and it is scattered: route objects for the same blocks turn up in the APNIC, RADB and NTTCOM databases under three different maintainers, MAINT-VN-VNPT, MAINT-AS45899 and MAINT-VNPT. A prefix filter built from any single IRR source will come up short.
The one record VNPT curates itself is its PeeringDB entry, and it lists two IRR sets rather than one: AS-45899 beside AS-45899CUST, the second named for the customer networks it carries. Expanding that customer set is how you find which downstream networks are announced through AS45899 rather than by VNPT. None of it gives city-level placement, so a geolocation dispute has no operator statement to appeal to, and the APNIC inetnum - whose covering object is the VNPT-VN allocation held under MAINT-VN-VNNIC, with the incident-response handle IRT-VNNIC-AP - is as specific as the published record gets.
Whose machine is on a VNPT address
Reverse DNS cannot help here, so the separation has to come from the routing table. AS45899 carries VNPT's own subscriber space, but it also transits the group's other autonomous systems: AS135905, registered at APNIC to Vietnam Posts and Telecommunications Group, has exactly one observed upstream and it is AS45899, while AS7643 is observed behind AS45899 and AS135905 and nothing else. An address that looks like VNPT by brand may therefore originate somewhere else in the group, and checking the origin rather than the company name is what tells you whether you are looking at the mass-market network or one of its smaller siblings.
Inbound reachability is the other test. The covering registry object a lookup returns for these blocks is the /11-sized VNPT-VN allocation, not a per-customer assignment, so whois will not name a business behind a given address the way a sub-allocated block would. Older IRR entries make this worse rather than better: route objects for 222.252.0.0/14 sit in the RADB and REACH databases naming AS7643 as origin and describing themselves as proxy-registered customer routes, alongside APNIC objects for the same space naming AS45899. Check the live origin before attributing an address to either.
Related tools
Frequently asked questions
What IP ranges does VNPT use?
VNPT announces its Vietnamese address space under AS45899, recorded at APNIC as VNPT-AS-VN for VNPT Corp in Hanoi. The blocks in the table above are the largest currently in the routing table. VNPT publishes no geofeed, so the APNIC inetnum, whose covering object is the VNPT-VN allocation, is the most authoritative statement available about who holds a given block.
Why does a VNPT IP appear in my privacy test?
An address here means the session left through VNPT inside Vietnam with nothing tunnelling it, so a leak test that surfaces one while a VPN is connected has found the real line. The obvious next step, a reverse lookup, is a dead end on this network: addresses sampled in 113.178.0.0/16, 14.240.0.0/16, 222.255.0.0/16 and 113.190.0.0/16 all answered with exactly the same string, static.vnpt.vn. The word static in that name describes nothing about the address itself; it is one flat record served across the space, so it cannot separate a home fibre line from a business circuit, or one province from another. A registry lookup narrows it no further, because those blocks all sit under the same /11 allocation object rather than under per-customer assignments. With both of the usual identification routes flat, the origin ASN is the only field left that varies.
What does static.vnpt.vn mean in a reverse lookup?
Less than it looks like. Every VNPT address checked for this page, across four separate blocks, returned that one string rather than a name built from the address. It is a single flat record served for the space, so it does not indicate a fixed or purchased address, does not identify a city or province, and cannot tell a residential line apart from a business one.
Is AS45899 the same network as AS135905?
No, although both are registered to VNPT. AS45899 is the large consumer-facing network, while AS135905, recorded at APNIC to Vietnam Posts and Telecommunications Group, is a much smaller and newer autonomous system sitting downstream of it, as does AS7643. An address branded VNPT can originate in any of the three, so check the origin ASN rather than the company name.
Can a VPN exit run on a VNPT address?
It would be unusual for a commercial provider. AS45899 space goes to access subscribers on changing addresses rather than being rented as hosting, so there is normally no stable endpoint for clients to reach. Addresses announced by VNPT's customer networks, which are listed in the AS-45899CUST AS-SET, are a separate question and worth checking on their own.