116.110.10.20📋 Copy

# IP Intelligence Briefing: 116.110.10.20/32

Classification: Moderate Risk | Jurisdiction: Vietnam (VN) | Organization: VIETTEL-VN (ASN 24086)

## Executive Summary

IP address 116.110.10.20 is registered to Vietnam's Viettel network infrastructure and presents a moderate risk profile (risk score: 40). The IP has no active services exposed, no open ports detected, and no evidence of malicious activity. However, the IP shows DNSBL listings on two of eight monitored threat feeds. The surrounding /24 subnet demonstrates clean characteristics with zero abuse density and no threat-classified sibling IPs.

## Infrastructure Profile

Ownership & Registration:

• Organization: IRT-VNNIC-AP
• Netname: VIETTEL-VN
• ASN: 24086
• CIDR Block: 116.96.0.0/12
• RIR: APNIC
• BGP Prefix: 116.110.8.0/21

Geolocation:

• Country: Vietnam (VN)
• Region/City: Da Nang
• Accuracy Radius: 600 km
• Timezone: Asia/Ho_Chi_Minh

Network Classification:

• Service Purpose: Firewalled / No Services
• Cloud/CDN/Proxy/VPN/Hosting: Negative indicators
• IP Type: None identified
• Bogon Status: Not applicable

## Threat Assessment

Current Indicators:

• Risk Score: 40 (Moderate Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Status: 0 explicit blacklists
• DNSBL Listings: 2 of 8 total lists
• Threat Indicators: None detected
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Behavioral Analysis:

• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0

## Subnet Neighborhood Analysis (116.110.10.0/24)

Subnet Health:

• Abuse Density: 0.0 (Clean)
• Classification: Clean
• Total Siblings: 10
• Active Siblings: 4
• Threat Siblings: 0

Neighbor Risk Distribution:

• High Risk: 0 IPs
• Medium Risk: 2 IPs (116.110.10.22, 116.110.10.255)
• Low Risk: 7 IPs
• Average Neighbor Risk Score: 27.1

Notable neighbors include 116.110.10.22 (risk: 40) and 116.110.10.255 (risk: 40), both sharing the same risk profile as the subject IP.

## Historical Observations

Signal History:

• Total Observations: 14
• Most Recent: 2026-07-29T16:00:07 UTC
• Threat Persistence Days: 0
• Ownership Changes: 0
• Average Ownership Duration: Not applicable

Temporal Indicators:

• The IP shows no persistent malicious behavior
• Threat observation count: 0
• The IP is not flagged as persistently malicious
• Control plane shows route instability (isRouteStable: false) with 0 route changes in 30 days

## Relationships

Identified Associations:

• 3 relationships detected, all pointing to VIETTEL-VN network
• All relationships categorized as "Same Network"
• No external entity associations (hostnames, certificates, organizations beyond network)

## Recommended Actions

Firewall/Blocking Rules:

Analyst Notes:

• Risk score 40 indicates moderate risk requiring verification before blocking
• DNSBL listings present on 2 of 8 feeds warrant review
• No active services detected reduces immediate threat likelihood
• Subnet environment is clean with no threat-sibling correlation
• Recommended to monitor rather than block unless additional threat signals emerge

Risk Mitigation Recommendation: Monitor traffic patterns and threat intelligence feeds for escalation. Current data suggests defensive posture is appropriate but immediate blocking may not be warranted without additional corroborating evidence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.