116.110.2.7📋 Copy

# IP Intelligence Briefing: 116.110.2.7/32

## Executive Summary

IP address 116.110.2.7 is registered to VIETTEL-VN (ASN 24086, IRT-VNNIC-AP) in Da Nang, Vietnam. The IP carries a moderate risk score of 55 and is classified as "clean" within its /24 neighborhood. Three DNSBL listings were detected across eight total lists, indicating past security incidents. The subnet demonstrates low abuse density with no high-risk neighboring IPs.

## Ownership and Geolocation

• Organization: VIETTEL-VN (IRT-VNNIC-AP)
• ASN: 24086
• CIDR Block: 116.96.0.0/12
• Geolocation: Vietnam (VN), Da Nang region
• RIR: APNIC
• Registration: Not available in current dataset

## Risk Assessment

• Overall Risk Score: 55 (Moderate Risk)
• Provider Score: 0
• Authority Score: 0
• Operator Score: 0.1304 (Minimal)
• DNSBL Listings: 3 of 8 total lists
• Route Stability: Unstable (isRouteStable: false)
• Threat Persistence: 0 days observed

## Network Behavior

• Services: No open ports detected (Firewalled / No Services)
• DNS Resolution: No forward resolution confirmed
• PTR Records: None detected
• TLS Certificates: None
• HTTP Services: None detected
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0

## Neighborhood Analysis (116.110.2.0/24)

• Subnet Classification: Clean
• Abuse Density: 0
• Total Siblings: 9
• Active Siblings: 5
• Threat Siblings: 0
• Risk Distribution: 0 high-risk, 2 medium-risk, 5 low-risk

Notable Neighbors:

## Observation History

Thirteen signal observations recorded. Recent observations (2026-07-29) indicate:

• Subnet classification maintained as "clean" with 0 abuse density
• DNSSEC valid on reverse lookup zone (7.2.110.116.in-addr.arpa)
• Operator score consistent at 0.1304 (Minimal)
• DNSBL listings consistently detected (3 of 8 lists)

## Relationships

Two relationships identified:

• Same Network: VIETTEL-VN
• Same Network: VIETTEL-VN

No associated hostnames, organizations, or certificates detected beyond network-level associations.

## Recommended Actions

Based on the moderate risk profile and DNSBL listings, the following defensive measures are recommended:

• Monitor for service activation on this IP
• Review DNSBL listing sources for context
• Consider rate limiting if outbound connections are observed
• No immediate blocking required given clean neighborhood classification

## Conclusion

IP 116.110.2.7 represents a moderate-risk residential or infrastructure endpoint in Vietnam with historical DNSBL activity but currently clean neighborhood classification. The absence of open services and zero threat siblings suggests limited immediate threat. SOC teams should monitor for service activation while maintaining awareness of the historical DNSBL listings.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.