116.110.7.94 is an IPv4 address operated by IRT-VNNIC-AP (AS24086), geolocated to Da Nang, Vietnam. As of October 10, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.
# IP Intelligence Briefing: 116.110.7.94/32
Classification: Low Risk | Risk Score: 15 | Status: Firewalled / No Services
## Executive Summary
IP 116.110.7.94 is a low-risk address operated by Viettel-VN (ASN 24086), a major Vietnamese telecommunications provider. The IP is currently firewalled with no open services, no known threat indicators, and no active malicious activity. Neighborhood analysis indicates minimal abuse density within the /24 subnet.
## Technical Profile
| Attribute | Value |
|---|---|
| **Organization** | IRT-VNNIC-AP (Viettel-VN) |
| **Country** | Vietnam (Da Nang) |
| **CIDR Block** | 116.96.0.0/12 |
| **ASN** | 24086 |
| **Geolocation Confidence** | 0.52 (Multi-signal inference) |
| **Network Role** | Provider infrastructure |
| **Service Purpose** | Firewalled / No Services |
## Threat Indicators
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- Blacklist Count: 0
- DNSBL Listings: 1 of 8 total lists
- Campaign Associations: None detected
## Behavioral Analysis
The IP exhibits no persistent malicious behavior. Observation history (12 signals as of 2026-07-26) shows:
- Stable ownership registration via APNIC RIR
- Geolocation signals consistent with Vietnam (VN)
- No enumeration strikes, honeypot hits, or WAF violations
- ICMP probes blocked, preventing full geolocation validation
## Neighborhood Analysis
| Metric | Value |
|---|---|
| **Subnet** | 116.110.7.94/24 |
| **Total Siblings** | 8 |
| **Abuse Density** | 0 (Minimal) |
| **High-Risk Neighbors** | 0 |
| **Medium-Risk Neighbors** | 1 |
| **Low-Risk Neighbors** | 6 |
Notable neighbor IPs include 116.110.7.119 (risk score 40) and 116.110.7.37/55 (risk score 25), but these do not significantly elevate the risk profile of the target IP.
## Security Recommendations
Based on current risk profile, no immediate blocking or filtering actions are required. However, the following considerations apply:
1. Monitor DNSBL Status: The IP appears on one DNSBL list among eight queried. Verify if this is a false positive and maintain awareness of reputation changes.
2. Route Stability: BGP route is not stable. Consider monitoring for routing changes that could impact traffic patterns.
3. No Services Detected: With no open ports or services exposed, direct exploitation is unlikely. Focus on inbound traffic filtering if applicable.
4. Viettel Infrastructure: As a legitimate telecom provider IP, this is unlikely to be a spoofing source. Treat as benign unless specific threat intelligence suggests otherwise.
## Conclusion
IP 116.110.7.94 presents a low risk profile consistent with legitimate provider infrastructure. No immediate threat mitigation actions are warranted. SOC analysts may monitor for changes in DNSBL status or neighborhood risk patterns, but current data supports treating this IP as benign.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-VNNIC-AP |
| ASN | AS24086 |
| Network Name | VIETTEL-VN |
| CIDR Block | 116.96.0.0/12 |
| RIR | APNIC |
| Country | VN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS24086 |
| Network Prefix | 116.110.0.0/21 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 21% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 14% | 1 | 3 |
| geolocation | 17% | 2 | 3 |
| Overall | 15% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 02:17:26 UTC |
| Last Seen | 2026-10-10 19:32:43 UTC |
| Profile Built | 2026-10-10 19:42:56 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 26 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 116.110.7.94
Who owns the IP address 116.110.7.94?
116.110.7.94 is registered to IRT-VNNIC-AP. The address falls within the 116.96.0.0/12 network block. Registration is held at APNIC.
Where is 116.110.7.94 located?
Geolocation data places 116.110.7.94 in Da Nang, Da Nang, Vietnam. The local time zone is Asia/Ho_Chi_Minh. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 116.110.7.94 malicious or safe?
116.110.7.94 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.