116.110.157.26📋 Copy

# IP Intelligence Briefing: 116.110.157.26/32

Date: 2026-07-29

Status: Low Risk / Monitored

## Executive Summary

IP 116.110.157.26 presents a low-risk profile with a risk score of 25. The address is firewalled with no open services detected. Geographic signals show conflicting data between Canada (Toronto) and Vietnam with low confidence scores. The IP appears on one DNSBL list out of eight checked. No established relationships or campaign indicators were identified.

## Technical Profile

Risk Assessment:

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Operator Score: 0.1304 (Minimal)

Network Classification:

• ASN: 24086
• BGP Prefix: 116.110.152.0/21
• Route Stability: False (route changes detected)
• Service Purpose: Firewalled / No Services
• No open ports detected
• No TLS certificates or HTTP services active

Geolocation:

• Primary: Canada, Ontario, Toronto (CA-ON)
• Recent signals: Vietnam (confidence 0.35)
• Multiple geolocation sources indicate consensus

Threat Indicators:

• Blacklist Count: 0 (threat indicators section)
• DNSBL Listings: 1 of 8 total lists
• Not classified as Tor exit, spam source, or known attacker
• No active threat campaigns detected

## Historical Observations

Ten signals were observed on 2026-07-29. Key observations include:

• DNSBL listing with high severity rating
• Geolocation signals showing Vietnam with 600km accuracy radius
• Network role classification consistently showing no proxy/VPN/Tor characteristics
• Operator score signals indicating "Minimal" risk classification

## Neighborhood Analysis

Subnet: 116.110.157.0/24

• Total Siblings: 5
• Abuse Density: 0
• Risk Distribution: 0 high, 2 medium, 3 low

Notable Neighbors:

## Relationship Graph

No relationships were discovered for this IP address. No associated subnets, hostnames, organizations, or certificates were identified.

## Traceroute & Path Analysis

• Hop Count: 20
• Transit Networks: Comcast, Cogent
• Timed Out Hops: 3
• Last Hop RTT: 255.5ms

## Recommended Actions

Immediate: No immediate blocking required. Risk score of 25 falls within acceptable thresholds.

Monitoring: Continue observation due to:

• Route instability (route changes detected)
• DNSBL listing presence
• Geographic signal inconsistencies

Network Policy: Standard monitoring rules apply. No specific firewall rules recommended beyond baseline security policies.

## Intelligence Assessment

This IP address represents a low-risk infrastructure endpoint. The presence of one DNSBL listing and route instability warrants continued monitoring but does not indicate active malicious behavior. The lack of open services, combined with the firewalled state, suggests legitimate hosting or infrastructure use. Geographic inconsistencies between Canadian and Vietnamese signals require periodic validation but fall within acceptable noise levels for this risk tier.

Classification: MONITOR

Priority: LOW

Action: Continue standard observation cycle

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.