116.110.222.88📋 Copy

## IP Intelligence Briefing: 116.110.222.88/32

Classification: Moderate Risk Infrastructure | Date: 2026-07-18

Executive Summary

IP 116.110.222.88 is a Vietnamese telecommunications infrastructure address operated by VIETTEL-VN (ASN: 24086). The address presents moderate risk (score: 55) primarily due to DNSBL listings. No active threat indicators or malicious behavior observed. Neighbor subnet shows clean abuse profile.

Infrastructure Profile

Threat Assessment

• Risk Score: 55 (Moderate)
• Abuse Confidence: Not assigned
• Known Attacker: No
• Spam Source: No
• Tor Exit: No
• Blacklist Count: 0
• DNSBL Listed: 3 of 8 total lists
• Threat Persistence: 0 days (no persistent malicious activity)

Network Behavior

• Open Ports: None detected
• DNS Resolution: Failed forward resolution
• PTR Records: None
• Services: No active services (firewalled)
• HTTP/HTTPS: No web services detected
• TLS Certificates: None

Control Plane Analysis

• Route Stability: False
• BGP Prefix: 116.110.216.0/21
• RPKI State: Not evaluated
• Delegation Age: Unknown
• Operator Score: 0.1304 (Minimal)

Neighborhood Assessment

• Subnet: 116.110.222.0/24
• Abuse Density: 0 (Clean)
• Sibling Count: 1
• Active Siblings: 0
• Threat Siblings: 0
• Notable Neighbor: 116.110.222.245 (Risk: 25, Authority: 50)

Historical Observations

13 observations recorded. Recent signals (2026-07-18) show:

• Consistent Vietnam geolocation
• Stable ASN and RIR data
• No ownership changes
• No threat observation count

Intelligence Narrative

The IP address 116.110.222.88 belongs to Viettel's Vietnamese telecommunications infrastructure. The moderate risk score stems from DNSBL listings rather than active malicious behavior. The address is firewalled with no open services, indicating it may be part of internal network infrastructure or a dedicated service endpoint. The neighbor subnet demonstrates a clean abuse profile with only one low-risk sibling address. No evidence of campaign participation or correlated malicious activity was found.

Recommended Actions

• Allow standard traffic flows consistent with Vietnamese telecom infrastructure
• Monitor DNSBL listing status for changes
• No immediate blocking recommended unless additional threat indicators emerge
• Contextualize in SOC alerts as legitimate infrastructure rather than threat source

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.