42.112.76.45📋 Copy

# IPDEBRIEF INTELLIGENCE BRIEFING

## Target: 42.112.76.45/32

Classification: Moderate Risk | Date: 2026-07-24

---

## EXECUTIVE SUMMARY

IP 42.112.76.45 presents a moderate risk profile (score: 55) with no active threat indicators. The address is assigned to FPT Corporation's static IP network under ASN 18403 (IRT-VNNIC-AP). Despite the network's Vietnam-based registration, geolocation data shows conflicting claims between claimed Hong Kong location and observed Vietnam coordinates. No open services or active scanning detected.

---

## OWNERSHIP & NETWORK CLASSIFICATION

• ASN: 18403 (IRT-VNNIC-AP)
• Organization: IRT-VNNIC-AP (FPT Corporation)
• CIDR Block: 42.112.64.0/20
• RIR: APNIC
• Network Type: Static IP (Provider network)
• Status: Active, no ownership changes

---

## GEOLOCATION ANALYSIS

Inconsistency Detected: Multiple signals indicate conflicting geolocation data.

• Claimed Location: Hong Kong (HK)
• Observed Coordinates: 21.0184°N, 105.8461°E (Vietnam)
• Distance Discrepancy: 8,769 km
• Geoplusibility: False
• Route Origin: 42.112.76.0/24 (BGP prefix)

Note: Geolocation consensus is false with multiple sources showing conflicting data. This inconsistency may indicate IP spoofing or routing anomalies.

---

## THREAT ASSESSMENT

• Risk Score: 55 (Moderate)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Active Threat Indicators: None
• Campaign Correlations: 0
• DNSBL Listings: 3 of 8 total lists

Behavioral Signals:

• Honeypot hits: 0
• Enumeration strikes: 0
• WAF violations: 0
• Total incidents: 0

---

## SERVICE PROFILE

• Open Ports: None detected
• HTTP Services: None
• TLS Certificates: None
• DNS Records: No PTR hostnames, no forward resolution
• Email Authentication: No SPF, DMARC, or TXT records

Conclusion: IP appears to be firewalled with no public-facing services.

---

## NEIGHBORHOOD ANALYSIS

• Subnet: 42.112.76.0/24
• Abuse Density: 0 (Clean)
• Total Siblings: 2
• Active Siblings: 0
• Threat Siblings: 0

Neighbor Assessment:

• 42.112.76.198: Risk Score 0, Authority Score 50 (Low risk)

Classification: Subnet classified as clean with no inherited threat risk.

---

## OBSERVATION HISTORY (15 Signals)

Recent monitoring reveals:

• Ownership: Stable with zero ownership changes
• Abuse Contact: hm-changed@vnnic.vn (consistent)
• Threat Persistence: 0 days, no persistent malicious activity
• Threat Observations: 0 recorded incidents
• RTT Measurements: 235ms average, 8,769km distance claimed

---

## NETWORK TOPOLOGY

• Hop Count: 11
• First Hop RTT: 0.1ms
• Last Hop RTT: 441.1ms
• Transit Networks: Comcast, Lumen
• Timeouts: 1 hop timed out

---

## RECOMMENDED ACTIONS

Based on the moderate risk profile and geolocation inconsistency:

1. Monitor the IP for service activation or DNS resolution attempts

2. Verify legitimate business purpose for this static IP assignment

3. Investigate the geolocation discrepancy between claimed HK location and observed Vietnam coordinates

4. Add to watchlist for future threat correlation if behavior changes

5. No immediate blocking recommended given no active threat indicators

---

## ANALYST NOTES

This IP belongs to a legitimate ISP infrastructure (FPT Corporation) with no evidence of malicious activity. The moderate risk score (55) appears to stem from network classification flags and geolocation inconsistencies rather than active threat behavior. The subnet shows clean classification with minimal risk. Monitor for changes in service profile or threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.