116.110.14.81📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 116.110.14.81/32 | Classification: Moderate Risk | Date: 2026-07-26

## EXECUTIVE SUMMARY

IP 116.110.14.81 is a Vietnamese infrastructure address operated by Viettel-VN (ASN 24086) with a moderate risk score of 40. The IP presents as firewalled with no active services and is not associated with known threat campaigns, malware distribution, or active exploitation infrastructure.

## NETWORK OWNERSHIP & GEOLOCATION

• Organization: IRT-VNNIC-AP (Viettel-VN)
• ASN: 24086
• Country: Vietnam (VN)
• City/Region: Da Nang
• Network Block: 116.96.0.0/12 (APNIC RIR)
• BGP Prefix: 116.110.8.0/21
• Control Plane: Route stability flagged as false; 0 route changes in 30-day period

## THREAT ASSESSMENT

• Risk Score: 40/100 (Moderate)
• Abuse Confidence Score: Not applicable
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Status: 0 blacklists; listed on 2 of 8 DNSBL checks
• Threat Persistence: 0 days; 0 threat observation count
• Campaign Association: No certificate or banner matches; 0 correlated IPs

Key Observations:

• No open ports detected; service purpose classified as "Firewalled / No Services"
• No TLS certificates, HTTP banners, or server fingerprints
• No email authentication records (SPF/DMARC absent)
• Not associated with honeypot hits, enumeration strikes, or WAF violations

## NEIGHBORHOOD ANALYSIS (116.110.14.0/24)

• Abuse Density: 0
• Subnet Classification: Clean
• Total Siblings: 10
• Active Siblings: 2
• Threat Siblings: 0

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 3 (including 116.110.14.96@25, 116.110.14.181@15)
• Low Risk: 6
• Notable neighbors with risk score 40: 116.110.14.182, 116.110.14.194, 116.110.14.250

## OBSERVATION HISTORY (14 Signals)

Recent observations (2026-07-26) indicate:

• Country geolocation inference: Vietnam (52% confidence)
• Network classification: Clean subnet
• Ownership: Stable with 0 changes
• ICMP validation: Blocked (unable to validate); minimum possible RTT 187.2ms

## RECOMMENDED ACTIONS

No automated action recommendations generated due to moderate risk classification. However, the following rules are available for defensive posturing:

Firewall Rules:

• iptables: `iptables -A INPUT -s 116.110.14.81 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 116.110.14.81 drop`
• nginx: `deny 116.110.14.81;`
• pfSense: `116.110.14.81/32`
• Cloudflare WAF: Block IP with expression `ip.src eq 116.110.14.81`
• AWS WAF: `Addresses: ["116.110.14.81/32"]`

## INTELLIGENCE JUDGMENT

This IP represents legitimate infrastructure from a major Vietnamese telecommunications provider. The moderate risk score (40) likely reflects historical network-level activity rather than direct attribution to malicious operations. No active threat indicators or attack patterns were observed. The subnet shows low abuse density with minimal threat sibling activity.

Recommendation: Monitor for service changes or escalation in threat indicators. Current threat posture does not warrant immediate blocking, though defensive rules may be applied based on organizational security policies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.