116.99.168.31📋 Copy

# IP Intelligence Briefing: 116.99.168.31/32

## Executive Summary

IP address 116.99.168.31/32 is a residential broadband endpoint operated by Viettel Vietnam (ASN 24086). Current risk assessment: LOW RISK (Score: 25/100). No active threat indicators detected.

## Technical Profile

• Organization: IRT-VNNIC-AP / Viettel Corporation
• ASN: 24086
• Geolocation: Qui Nhon, Vietnam (APNIC RIR)
• Network: 116.99.168.0/21 (origin)
• Network Role: Residential broadband / Firewalled
• DNS Resolution: dynamic-adsl.viettel.vn / dynamic-ip-adsl.viettel.vn

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence: None
• Known Campaigns: None identified
• Blacklist Status: 1 DNSBL listing (minimal impact)
• Threat Indicators: None
• Classification: mostly_clean
• Services: No open ports detected (firewalled/no services)

## Neighborhood Context (116.99.168.0/24)

• Total Siblings: 15
• Abuse Density: 0.071 (low-moderate)
• Risk Distribution: High (1), Medium (4), Low (9)
• High-Risk Neighbors: 116.99.168.40 (score: 80), 116.99.168.244 (score: 65)

## Historical Trend

• June 25, 2026: Abuse density 0.0667, inherited risk 2
• June 5, 2026: Abuse density 0.1818, inherited risk 5
• Trend: Risk indicators decreasing over observation period

## Network Relationships

• ISP Network: VIETTEL-VN (multiple same-network associations)
• DNS Associations: dynamic-adsl.viettel.vn, dynamic-ip-adsl.viettel.vn
• Total Relationships: 25 (network + DNS associations)

## Recommended Actions

• Firewall Policy: Monitor but no immediate blocking required
• Detection Rules: No specific threat signatures identified
• Correlation: Track for any emerging threat activity within Viettel network segment
• Block Criteria: Not recommended based on current risk profile

## Intelligence Notes

The IP operates as a residential broadband address from Viettel's Vietnamese ISP infrastructure. While the /24 subnet contains elevated-risk neighbors (116.99.168.40), this specific endpoint maintains a low-risk profile with no observed malicious activity. Historical data shows declining risk indicators over the past 20 days. No correlation with known threat campaigns or attacker infrastructure detected.

---

*Report generated: 2026-06-25 | Source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.