# 116.110.149.157 — IP Intelligence Summary

116.110.149.157 is an IPv4 address operated by IRT-VNNIC-AP (AS24086), geolocated to Da Nang, Vietnam. As of August 29, 2026, IPDebrief rates it Low Risk (30/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/116.110.149.157
- Last updated: 2026-08-29

## Ownership

- Organization: IRT-VNNIC-AP
- Network name: VIETTEL-VN
- Allocated block: 116.96.0.0/12
- ASN: AS24086 (https://ipdebrief.com/asn/24086)
- Regional registry: APNIC

## Location

- City: Da Nang
- Region: Da Nang
- Country: Vietnam
- Time zone: Asia/Ho_Chi_Minh

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (30/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP INTELLIGENCE BRIEFING

**Target**: 116.110.149.157/32

**Date**: 2026-07-23

**Classification**: Moderate Risk (Score: 55/100)

\---

\## EXECUTIVE SUMMARY

IP 116.110.149.157 is a Vietnamese Internet Service Provider (ISP) infrastructure address associated with Viettel Corporation. The IP exhibits moderate risk characteristics with no active malicious indicators but warrants monitoring due to elevated risk score and neighborhood abuse density.

\---

\## OWNERSHIP & GEOSLOCATION

\- **ASN**: 24086 (IRT-VNNIC-AP)

\- **Organization**: VIETTEL-VN (Viettel Corporation)

\- **Network Block**: 116.96.0.0/12

\- **Geolocation**: Vietnam (VN), Da Nang

\- **RIR**: APNIC

\- **BGP Origin**: 116.110.144.0/21

\- **AS Path**: 2914 → 7552 → 24086 → 24086

\---

\## THREAT ASSESSMENT

**Risk Score**: 55/100 (Moderate)

| Indicator | Status |

|-----------|--------|

| Active Threat Indicators | None |

| Known Campaigns | None |

| Blacklist Count | 0 |

| DNSBL Listings | 3/8 lists |

| Tor Exit Node | No |

| Known Attacker | No |

| Spam Source | No |

**Control Plane Observations**:

\- Route stability: Unstable (1 route change in 30 days)

\- RPKI Status: Not validated

\- MOAS (Multiple Origin ASN Source): No

\---

\## NETWORK PROFILE

**Services**: Firewalled / No Services Detected

\- Open Ports: None

\- TLS Certificate: None

\- HTTP Services: None

\- DNS PTR Records: None

\- Forward Resolution: 0 records

\---

\## SUBNET ANALYSIS (116.110.149.0/24)

\- **Abuse Density**: 0.2222 (Moderate)

\- **Classification**: Mixed

\- **Total Siblings**: 9

\- **Active Siblings**: 1

\- **Threat Siblings**: 2

**High-Risk Neighbors**:

\- 116.110.149.111 (Risk: 55)

\- 116.110.149.136 (Risk: 55)

\---

\## OBSERVATION HISTORY

Total observations: 15 (Recent: 2026-07-23)

\- **Ownership Changes**: 0 (Stable)

\- **Threat Persistence**: 0 days

\- **BGP Route Changes**: 1 (30-day window)

\- **Threat Observation Count**: 0

Recent signals indicate BGP prefix updates and network classification assessments. No persistent malicious activity detected.

\---

\## RELATIONSHIP GRAPH

Primary relationship: Same Network (VIETTEL-VN)

\- 4 relationship entries confirm Viettel network association

\- No external entity correlations identified

\---

\## RECOMMENDED ACTIONS

**Primary Recommendation**: Monitor and potentially block traffic from this IP due to elevated risk score.

**Firewall Rules**:

\`\`\`bash

\# iptables

iptables -A INPUT -s 116.110.149.157 -j DROP

\# nftables

nft add rule inet filter input ip saddr 116.110.149.157 drop

\# nginx

deny 116.110.149.157;

\`\`\`

**Cloud Security Recommendations**:

\- **Cloudflare WAF**: Block rule configured for 116.110.149.157

\- **AWS WAF**: Address set to 116.110.149.157/32 with description "IPDebrief risk 55"

\---

\## ANALYST NOTES

1. **No Active Exploitation**: Despite moderate risk score, no active threat indicators detected

2. **ISP Infrastructure**: This is a legitimate ISP address range; consider whitelist if internal network traffic is expected

3. **Neighborhood Context**: Two threat siblings in subnet warrant monitoring of adjacent addresses

4. **Route Instability**: BGP route changes may indicate network reconfiguration or potential hijack attempts

**Priority**: Medium – Monitor but consider blocking if no legitimate business use case exists.

## Nearby addresses

- 116.110.149.21 (https://ipdebrief.com/116.110.149.21)
- 116.110.149.37 (https://ipdebrief.com/116.110.149.37)
- 116.110.149.64 (https://ipdebrief.com/116.110.149.64)
- 116.110.149.81 (https://ipdebrief.com/116.110.149.81)
- 116.110.149.111 (https://ipdebrief.com/116.110.149.111)
- 116.110.149.118 (https://ipdebrief.com/116.110.149.118)
- 116.110.149.136 (https://ipdebrief.com/116.110.149.136)
- 116.110.149.163 (https://ipdebrief.com/116.110.149.163)
- 116.110.149.203 (https://ipdebrief.com/116.110.149.203)
- 116.110.149.210 (https://ipdebrief.com/116.110.149.210)

---

Source: IPDebrief, "116.110.149.157 IP intelligence", https://ipdebrief.com/116.110.149.157, updated 2026-08-29. Assessments are probabilistic.