# 116.110.208.186 — IP Intelligence Summary

116.110.208.186 is an IPv4 address operated by IRT-VNNIC-AP (AS24086), geolocated to Da Nang, Vietnam. As of October 11, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/116.110.208.186
- Last updated: 2026-10-11

## Ownership

- Organization: IRT-VNNIC-AP
- Network name: VIETTEL-VN
- Allocated block: 116.96.0.0/12
- ASN: AS24086 (https://ipdebrief.com/asn/24086)
- Regional registry: APNIC

## Location

- City: Da Nang
- Region: Da Nang
- Country: Vietnam
- Time zone: Asia/Ho_Chi_Minh

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

**IP INTELLIGENCE BRIEFING**

**Subject:** 116.110.208.186/32

**Classification:** Low Risk / No Active Threat Indicators

**Date:** \[Current Date\]

\---

\### EXECUTIVE SUMMARY

IP 116.110.208.186 presents a low-risk profile (risk score: 25) with no active threat indicators. The IP is firewalled with no open services and shows minimal neighborhood abuse density. However, geolocation signals exhibit significant inconsistencies requiring monitoring.

\---

\### RISK PROFILE

| Metric | Value |

|--------|-------|

| **Risk Score** | 25 (Low Risk) |

| **Provider Score** | 0 |

| **Authority Score** | 0 |

| **Stability Score** | 0 |

| **Abuse Confidence** | Not applicable |

| **Reputation** | Low Risk |

\---

\### GEOGRAPHIC ANALYSIS

**Current Classification:** United States (Chicago, IL)

**Geolocation Consensus:** ❌ INCONSISTENT

**GeoPlausible Status:** False

**Signal Conflicts Detected:**

\- Multiple observations indicate Vietnam (VN) with coordinates 14.06°N, 108.28°E

\- Other signals classify as US-IL (Chicago)

\- GeoSource count: 2

\- GeoConsensus: False

This geolocation discrepancy suggests either routing anomalies, spoofed origin data, or multi-homed infrastructure. Recommend correlating with BGP routing data.

\---

\### NETWORK ATTRIBUTES

| Attribute | Value |

|-----------|-------|

| **Origin ASN** | 24086 |

| **BGP Prefix** | 116.110.208.0/21 |

| **Control Plane** | Stable |

| **Route Stability** | False |

| **DNSBL Listed** | 1 of 8 lists |

| **Open Ports** | None |

| **Service Banner** | Firewalled / No Services |

| **PTR Resolution** | None |

| **Forward Resolution** | 0 hosts |

**Network Classification:**

\- Not a CDN, Cloud, Proxy, Tor, VPN, or Hosting service

\- Not bogon, mobile, or residential

\- Not part of an anycast network

\---

\### THREAT INDICATORS

**Active Threat Signals:** NONE

\- Tor Exit Node: No

\- Known Attacker: No

\- Spam Source: No

\- Blacklist Count: 0

\- Known Campaigns: None

\- Threat Feeds: Empty

\---

\### NEIGHBORHOOD ANALYSIS (116.110.208.0/24)

**Subnet Risk Profile:**

\- **Abuse Density:** 0 (Minimal)

\- **Total Siblings:** 6

\- **Active Siblings:** 0

\- **Threat Siblings:** 0

\- **Inherited Risk:** 0

**Neighbor Risk Distribution:**

| IP Address | Risk Score | Authority |

|------------|------------|-----------|

| 116.110.208.21 | 35 | 50 |

| 116.110.208.56 | 0 | 50 |

| 116.110.208.89 | 40 | 50 |

| 116.110.208.105 | N/A | N/A |

| 116.110.208.144 | 25 | 50 |

| 116.110.208.247 | 0 | 50 |

**Assessment:** Minimal neighborhood threat activity. No high-risk neighbors identified.

\---

\### RELATIONSHIP ANALYSIS

**Linked Entities:** NONE

\- No associated subnets

\- No associated hostnames

\- No associated organizations

\- No associated certificates

**Campaign Correlation:** 0 correlated IPs detected

\---

\### OBSERVATION HISTORY

**Total Observations:** 12

**Recent Activity Pattern:** Mixed geolocation signals with low confidence scores (0.17-0.35)

**Key Timeline Signals:**

\- **2026-07-18 03:26:30** - RIR: APNIC, Org: IRT-VNNIC-AP

\- **2026-07-18 03:26:23** - Geo: Vietnam (14.06°N, 108.28°E), Confidence: 0.35

\- **2026-07-18 03:24:52** - Operator Score: Minimal (0.1304)

**Threat Persistence:** 0 days

**Is Persistently Malicious:** No

\---

\### SECURITY ACTIONS & RECOMMENDATIONS

**Current Risk Level:** Low

**Recommended Action:** Monitor

**Firewall Rules:** None generated (risk score below threshold)

**Suggested Actions:**

1. **Monitor geolocation inconsistencies** - Investigate routing vs. reported origin

2. **Correlate with BGP data** - Verify ASN 24086 routing for this prefix

3. **Maintain passive monitoring** - No immediate blocking recommended

4. **Watch for service changes** - IP is currently firewalled; monitor for service emergence

\---

\### CONCLUSION

IP 116.110.208.186 is classified as low risk with no active malicious indicators. The primary intelligence concern is geolocation signal inconsistency between US and Vietnam classifications. The subnet exhibits minimal abuse density with no high-risk neighbors. No immediate defensive action required; maintain passive monitoring and correlate with routing data to resolve geolocation discrepancies.

\---

*Intelligence generated by IPDebrief Platform | Defensive Security Analysis*

## Nearby addresses

- 116.110.208.21 (https://ipdebrief.com/116.110.208.21)
- 116.110.208.56 (https://ipdebrief.com/116.110.208.56)
- 116.110.208.89 (https://ipdebrief.com/116.110.208.89)
- 116.110.208.105 (https://ipdebrief.com/116.110.208.105)
- 116.110.208.144 (https://ipdebrief.com/116.110.208.144)
- 116.110.208.247 (https://ipdebrief.com/116.110.208.247)
- 116.110.208.255 (https://ipdebrief.com/116.110.208.255)

---

Source: IPDebrief, "116.110.208.186 IP intelligence", https://ipdebrief.com/116.110.208.186, updated 2026-10-11. Assessments are probabilistic.
