45.121.24.222📋 Copy

## INTELLIGENCE BRIEFING: 45.121.24.222/32

Classification: Moderate Risk

Date: Current as of 2026-07-25

Source: IPDebrief Intelligence Platform

EXECUTIVE SUMMARY

IP 45.121.24.222 is a Vietnamese-originated address assigned to ASN 131429 (Vu Dinh Long/MOBIFONE-VN) with a moderate risk score of 40. The IP is currently firewalled with no active services, and exhibits minimal threat characteristics. Geographic consensus places the address in Vietnam (VN) with moderate accuracy (600km radius).

OWNERSHIP & INFRASTRUCTURE

• Organization: Vu Dinh Long
• Netname: MOBIFONE-VN
• ASN: 131429
• CIDR Block: 45.121.24.0/22
• RIR Registration: ARIN
• Abuse Contact: hm-changed@vnnic.vn
• Network Classification: Infrastructure provider, not CDN/Cloud/Proxy
• Route Stability: Unstable (false)
• Honeypot Status: No hits detected

THREAT INDICATORS

• Risk Score: 40 (Moderate Risk)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• DNSBL Listings: 2 out of 8 total lists
• Operator Score: 0.1304 (Minimal)
• Threat Persistence: 0 days
• Threat Observation Count: 1
• Abuse Confidence: Not flagged as high-confidence threat

NETWORK BEHAVIOR

• Open Ports: None detected
• TLS Certificate: Not observed
• HTTP Title: Not observed
• Service Banner: Not observed
• Connection Type: Firewall configuration prevents service enumeration
• Traceroute: 15 hops via Comcast and Lumen transit networks
• RTT: Last hop 256.4ms, first hop 0.2ms

GEOGRAPHIC ANALYSIS

• Country: Vietnam (VN)
• Coordinates: 14.06°N, 108.28°E (600km accuracy radius)
• Timezone: Asia/Ho_Chi_Minh
• GeoSource Count: 1
• Geo Consensus: True

SUBNET ANALYSIS (45.121.24.0/24)

• Abuse Density: 0 (Low)
• Neighbor IPs: 1 active sibling
• Neighbor Risk Profile:

- 45.121.24.220: Risk Score 25, Authority Score 50

• Risk Distribution: 1 low-risk neighbor, 0 medium/high-risk neighbors
• Inherited Risk: Minimal

OBSERVATION HISTORY

• Total Observations: 15 signals recorded
• Most Recent Activity: 2026-07-25
• Ownership Changes: 0 (Stable)
• Signal Types Observed:

- Ownership/registration data (Confidence: 0.95)

- Geographic location data (Confidence: 0.35)

- Operator score assessment (Confidence: 0.30)

• Threat Persistence: Not persistently malicious
• Campaign Correlation: No correlated IPs or certificate matches

RELATIONSHIP ANALYSIS

• Total Relationships: 2
• Primary Association: MOBIFONE-VN network
• Target Type: Network infrastructure
• Cert Matches: 0

RECOMMENDED ACTIONS

1. Monitor: Track for service enumeration or port opening

2. Block: Not recommended at this time (Moderate Risk)

3. Alert: Configure alerts for DNSBL listing changes

4. Investigate: Monitor neighborhood IP 45.121.24.220 for correlated activity

ASSESSMENT

The IP address presents moderate risk primarily due to Vietnamese origin and DNSBL listings. However, the address is currently firewalled with no active services, and exhibits minimal operator-level threat indicators. The low abuse density in the surrounding subnet and lack of persistent malicious behavior suggest this may be a dormant or newly assigned infrastructure address. SOC teams should monitor for service activation and cross-reference with known Vietnamese threat actors, but immediate blocking is not warranted based on current data.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.