45.119.212.99📋 Copy

IP INTELLIGENCE BRIEFING: 45.119.212.99/32

Date: 2026-06-21

Classification: Moderate Risk

Risk Score: 50/100

---

Executive Summary

IP 45.119.212.99 is assigned to Long Van System Solution JSC (LVHN-VN) in Vietnam. The address presents moderate risk (score 50/100) with no known malicious indicators, blacklisting count of 2, and clean neighborhood classification. The IP operates a multi-service host with standard web and remote administration services exposed.

---

Technical Profile

Open Services:

• Port 80/tcp (HTTP) – Apache/2.4.29
• Port 22/tcp (SSH) – OpenSSH_7.6p1 Ubuntu
• Port 8080/tcp (HTTP-ALT)
• Port 3389/tcp (RDP)

---

Network Attribution

The IP belongs to the LVHN-VN network, operated by Long Van System Solution JSC, a Vietnamese infrastructure provider. ASN 131423 is registered under APNIC with allocation date June 2015. The BGP prefix 45.119.212.0/24 shows zero route changes over 30 days, indicating stable routing. RPKI state not validated.

---

Geolocation

---

Threat Indicators

• Blacklist Status: Listed on 2 of 8 DNSBL feeds
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaigns: None identified
• Abuse Confidence Score: Not available
• Threat Feeds: Empty

Threat Persistence: Zero threat observation count with no persistent malicious activity detected.

---

Observations & History

Total observations: 15 signals collected.

Recent Activity:

• 2026-06-21: HTTP server fingerprint captured (Apache/2.4.29, HTTP/1.1, TTFB 555ms, status 200)
• 2026-06-18: ASN confirmation (131423), country inference (VN), neighborhood classification (clean), operator score assessment (0.1304 - Minimal)

Temporal Indicators:

• Ownership changes: 0
• Threat persistence days: 0
• Is persistently malicious: False

---

Related Infrastructure

The relationship graph contains 33 entries, all classified as "Same Network" relationships to LVHN-VN. No hostname, organization, certificate, or external entity relationships were discovered.

---

Neighborhood Assessment

Subnet: 45.119.212.99/24

Abuse Density: 0/100

Classification: Clean

Siblings: 1 total, 1 active, 0 threat siblings

The /24 subnet shows no inherited risk and minimal abuse activity.

---

Risk Assessment & Recommendations

Risk Factors:

• Moderate risk score (50/100) primarily driven by DNSBL listings
• RDP (3389) and SSH (22) services exposed on internet-facing IP
• No certificate-based verification or email authentication (SPF/DMARC not configured)
• HTTP-only service with no HSTS or security headers

Recommended Actions:

1. Block or monitor inbound RDP (3389) and SSH (22) traffic per standard defensive posture

2. Monitor DNSBL listings for source IP reputation changes

3. Verify service necessity for public-facing RDP and HTTP-alt (8080) ports

4. Implement rate limiting on SSH and HTTP services

5. Enable TLS/HTTPS for HTTP services where applicable

Classification: Defensive monitoring recommended. No immediate blocking required based on current threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.