116.110.208.186📋 Copy

IP INTELLIGENCE BRIEFING

Subject: 116.110.208.186/32

Classification: Low Risk / No Active Threat Indicators

Date: [Current Date]

---

EXECUTIVE SUMMARY

IP 116.110.208.186 presents a low-risk profile (risk score: 25) with no active threat indicators. The IP is firewalled with no open services and shows minimal neighborhood abuse density. However, geolocation signals exhibit significant inconsistencies requiring monitoring.

---

RISK PROFILE

---

GEOGRAPHIC ANALYSIS

Current Classification: United States (Chicago, IL)

Geolocation Consensus: ❌ INCONSISTENT

GeoPlausible Status: False

Signal Conflicts Detected:

• Multiple observations indicate Vietnam (VN) with coordinates 14.06°N, 108.28°E
• Other signals classify as US-IL (Chicago)
• GeoSource count: 2
• GeoConsensus: False

This geolocation discrepancy suggests either routing anomalies, spoofed origin data, or multi-homed infrastructure. Recommend correlating with BGP routing data.

---

NETWORK ATTRIBUTES

Network Classification:

• Not a CDN, Cloud, Proxy, Tor, VPN, or Hosting service
• Not bogon, mobile, or residential
• Not part of an anycast network

---

THREAT INDICATORS

Active Threat Signals: NONE

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: Empty

---

NEIGHBORHOOD ANALYSIS (116.110.208.0/24)

Subnet Risk Profile:

• Abuse Density: 0 (Minimal)
• Total Siblings: 6
• Active Siblings: 0
• Threat Siblings: 0
• Inherited Risk: 0

Neighbor Risk Distribution:

Assessment: Minimal neighborhood threat activity. No high-risk neighbors identified.

---

RELATIONSHIP ANALYSIS

Linked Entities: NONE

• No associated subnets
• No associated hostnames
• No associated organizations
• No associated certificates

Campaign Correlation: 0 correlated IPs detected

---

OBSERVATION HISTORY

Total Observations: 12

Recent Activity Pattern: Mixed geolocation signals with low confidence scores (0.17-0.35)

Key Timeline Signals:

• 2026-07-18 03:26:30 - RIR: APNIC, Org: IRT-VNNIC-AP
• 2026-07-18 03:26:23 - Geo: Vietnam (14.06°N, 108.28°E), Confidence: 0.35
• 2026-07-18 03:24:52 - Operator Score: Minimal (0.1304)

Threat Persistence: 0 days

Is Persistently Malicious: No

---

SECURITY ACTIONS & RECOMMENDATIONS

Current Risk Level: Low

Recommended Action: Monitor

Firewall Rules: None generated (risk score below threshold)

Suggested Actions:

1. Monitor geolocation inconsistencies - Investigate routing vs. reported origin

2. Correlate with BGP data - Verify ASN 24086 routing for this prefix

3. Maintain passive monitoring - No immediate blocking recommended

4. Watch for service changes - IP is currently firewalled; monitor for service emergence

---

CONCLUSION

IP 116.110.208.186 is classified as low risk with no active malicious indicators. The primary intelligence concern is geolocation signal inconsistency between US and Vietnam classifications. The subnet exhibits minimal abuse density with no high-risk neighbors. No immediate defensive action required; maintain passive monitoring and correlate with routing data to resolve geolocation discrepancies.

---

*Intelligence generated by IPDebrief Platform | Defensive Security Analysis*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.