# 116.110.14.81 — IP Intelligence Summary

116.110.14.81 is an IPv4 address operated by IRT-VNNIC-AP (AS24086), geolocated to Da Nang, Vietnam. As of October 6, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/116.110.14.81
- Last updated: 2026-10-06

## Ownership

- Organization: IRT-VNNIC-AP
- Network name: VIETTEL-VN
- Allocated block: 116.96.0.0/12
- ASN: AS24086 (https://ipdebrief.com/asn/24086)
- Regional registry: APNIC

## Location

- City: Da Nang
- Region: DN
- Country: Vietnam
- Time zone: Asia/Ho_Chi_Minh

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP INTELLIGENCE BRIEFING

**Target:** 116.110.14.81/32 | **Classification:** Moderate Risk | **Date:** 2026-07-26

\## EXECUTIVE SUMMARY

IP 116.110.14.81 is a Vietnamese infrastructure address operated by Viettel-VN (ASN 24086) with a moderate risk score of 40. The IP presents as firewalled with no active services and is not associated with known threat campaigns, malware distribution, or active exploitation infrastructure.

\## NETWORK OWNERSHIP & GEOLOCATION

\- **Organization:** IRT-VNNIC-AP (Viettel-VN)

\- **ASN:** 24086

\- **Country:** Vietnam (VN)

\- **City/Region:** Da Nang

\- **Network Block:** 116.96.0.0/12 (APNIC RIR)

\- **BGP Prefix:** 116.110.8.0/21

\- **Control Plane:** Route stability flagged as false; 0 route changes in 30-day period

\## THREAT ASSESSMENT

\- **Risk Score:** 40/100 (Moderate)

\- **Abuse Confidence Score:** Not applicable

\- **Known Attacker:** No

\- **Tor Exit Node:** No

\- **Spam Source:** No

\- **Blacklist Status:** 0 blacklists; listed on 2 of 8 DNSBL checks

\- **Threat Persistence:** 0 days; 0 threat observation count

\- **Campaign Association:** No certificate or banner matches; 0 correlated IPs

**Key Observations:**

\- No open ports detected; service purpose classified as "Firewalled / No Services"

\- No TLS certificates, HTTP banners, or server fingerprints

\- No email authentication records (SPF/DMARC absent)

\- Not associated with honeypot hits, enumeration strikes, or WAF violations

\## NEIGHBORHOOD ANALYSIS (116.110.14.0/24)

\- **Abuse Density:** 0

\- **Subnet Classification:** Clean

\- **Total Siblings:** 10

\- **Active Siblings:** 2

\- **Threat Siblings:** 0

**Neighbor Risk Distribution:**

\- High Risk: 0

\- Medium Risk: 3 (including 116.110.14.96@25, 116.110.14.181@15)

\- Low Risk: 6

\- Notable neighbors with risk score 40: 116.110.14.182, 116.110.14.194, 116.110.14.250

\## OBSERVATION HISTORY (14 Signals)

Recent observations (2026-07-26) indicate:

\- Country geolocation inference: Vietnam (52% confidence)

\- Network classification: Clean subnet

\- Ownership: Stable with 0 changes

\- ICMP validation: Blocked (unable to validate); minimum possible RTT 187.2ms

\## RECOMMENDED ACTIONS

No automated action recommendations generated due to moderate risk classification. However, the following rules are available for defensive posturing:

**Firewall Rules:**

\- iptables: \`iptables -A INPUT -s 116.110.14.81 -j DROP\`

\- nftables: \`nft add rule inet filter input ip saddr 116.110.14.81 drop\`

\- nginx: \`deny 116.110.14.81;\`

\- pfSense: \`116.110.14.81/32\`

\- Cloudflare WAF: Block IP with expression \`ip.src eq 116.110.14.81\`

\- AWS WAF: \`Addresses: \["116.110.14.81/32"\]\`

\## INTELLIGENCE JUDGMENT

This IP represents legitimate infrastructure from a major Vietnamese telecommunications provider. The moderate risk score (40) likely reflects historical network-level activity rather than direct attribution to malicious operations. No active threat indicators or attack patterns were observed. The subnet shows low abuse density with minimal threat sibling activity.

**Recommendation:** Monitor for service changes or escalation in threat indicators. Current threat posture does not warrant immediate blocking, though defensive rules may be applied based on organizational security policies.

## Nearby addresses

- 116.110.14.96 (https://ipdebrief.com/116.110.14.96)
- 116.110.14.106 (https://ipdebrief.com/116.110.14.106)
- 116.110.14.124 (https://ipdebrief.com/116.110.14.124)
- 116.110.14.181 (https://ipdebrief.com/116.110.14.181)
- 116.110.14.182 (https://ipdebrief.com/116.110.14.182)
- 116.110.14.186 (https://ipdebrief.com/116.110.14.186)
- 116.110.14.194 (https://ipdebrief.com/116.110.14.194)
- 116.110.14.209 (https://ipdebrief.com/116.110.14.209)
- 116.110.14.224 (https://ipdebrief.com/116.110.14.224)
- 116.110.14.250 (https://ipdebrief.com/116.110.14.250)
- 116.110.14.253 (https://ipdebrief.com/116.110.14.253)

---

Source: IPDebrief, "116.110.14.81 IP intelligence", https://ipdebrief.com/116.110.14.81, updated 2026-10-06. Assessments are probabilistic.