103.156.2.146📋 Copy

# INTELLIGENCE BRIEFING: 103.156.2.146/32

Classification: Low Risk | Last Updated: 2026-07-25

---

## EXECUTIVE SUMMARY

IP 103.156.2.146 is a low-risk address (score: 25) associated with Vietnamese network infrastructure. No active threat indicators detected. The address is firewalled with no open services and no recent malicious activity observed.

---

## OWNERSHIP & GEOLOCATION

• Organization: Doan Xuan Hoc
• Network: MOBIFONEDAKNONG-VN (103.156.2.0/23)
• ASN: 131429
• RIR: APNIC (Vietnam)
• Location: My Tho, Tin Giang Province, Vietnam (10.36°N, 106.36°E)
• Abuse Contact: hm-changed@vnnic.vn

---

## THREAT ASSESSMENT

• Risk Score: 25 / 100 (Low Risk)
• Abuse Confidence: Not applicable (no active threats)
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Associations: None identified

---

## NETWORK CHARACTERISTICS

• Service Status: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: None (no PTR records, no forward resolution)
• TLS/HTTP: No services exposed
• Route Stability: False (route changes observed)
• Operator Score: 0.1304 (Minimal)

---

## HISTORICAL OBSERVATIONS

• Total Signals: 9 observations
• Observation Window: Recent activity from 2026-07-25
• Geolocation Consistency: Consistent Vietnam attribution
• Threat Persistence: 0 days (no persistent malicious activity)
• Observation Trend: Stable, no increasing risk trajectory

---

## SUBNET ANALYSIS (103.156.2.0/24)

• Abuse Density: 0 (minimal subnet-level abuse)
• Neighbor Risk Distribution: 0 high-risk, 1 medium-risk, 3 low-risk
• Notable Neighbors:

- 103.156.2.97: Risk 40 (medium-risk)

- 103.156.2.155: Risk 25 (low-risk)

- 103.156.2.161: Risk 25 (low-risk)

- 103.156.2.60: Risk 0 (clean)

---

## RELATIONSHIPS

• Network Affiliation: MOBIFONEDAKNONG-VN
• Related Entities: None beyond network association

---

## RECOMMENDED ACTIONS

1. No blocking required – Address presents low-risk profile

2. Monitor subnet 103.156.2.97 – Medium-risk neighbor warrants observation

3. Allow legitimate traffic – No services currently exposed

4. Update firewall rules – No specific restrictions needed based on current risk profile

---

## SOC ANALYST NOTES

This IP is part of Vietnamese mobile infrastructure (MOBIFONEDAKNONG-VN). The low risk score, absence of open ports, and lack of threat indicators indicate this address is not actively engaged in malicious activity. The single DNSBL listing is likely historical or due to misconfiguration. No immediate defensive actions recommended. Monitor neighborhood IP 103.156.2.97 for potential correlated activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.