103.100.69.141📋 Copy

## IP Intelligence Briefing: 103.100.69.141/32

Classification: Low Risk (Score: 25/100)

Date: 2026-06-22

Jurisdiction: China (APNIC)

---

**Ownership & Geolocation**

• Organization: Zhaohui Yan (HNDT-NET)
• ASN: 34806
• CIDR Block: 103.100.68.0/22
• Location: China – Fengtai region, No. 8 West Road
• RIR: APNIC (Asia-Pacific)

**Network Classification**

• Role: Firewalled / No Services Detected
• Infrastructure Type: Not Cloud, CDN, VPN, Proxy, or Hosting
• Connection Type: Residential (no)

**Threat Intelligence Profile**

• Risk Score: 25 (Low Risk)
• Active Threat Indicators: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Status: 0 current listings (historical data shows 8 total blacklist references with 1 active listing at high severity)
• DNSBL Listings: 1 of 8 total lists

**Service & Port Analysis**

• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: No active web services
• DNS Records: No PTR hostnames, no forward resolution

**Subnet Analysis (103.100.69.0/24)**

• Abuse Density: 0%
• Classification: Clean
• Threat Siblings: 0
• Active Neighbors: 0
• Total Siblings: 1 (self)

**Observation History**

• Total Observations: 17 signals across monitoring period
• Recent Activity:

- 2026-06-22: Minimal operator score (0.1304), stable routing

- 2026-06-17: Detected on 8 threat feed lists (max severity: high)

- Network classification remained consistent throughout observation period

**Relationships**

• All 15 relationship entities map to "Same Network: HNDT-NET"
• No external organizational or certificate relationships detected

**Control Plane**

• BGP Prefix: 103.100.69.0/24
• Route Stability: Unstable (false)
• Route Changes (30d): 0
• RPKI State: Unknown
• DNSSEC: Valid
• IS Route Stable: False

---

**Assessment & Recommendations**

Summary: IP 103.100.69.141/32 presents a low-risk profile with no active service exposure. The IP is associated with a Chinese network (HNDT-NET) and is currently firewalled with no open ports or active services. While historical blacklist activity was detected in June 2026, current risk assessment indicates minimal threat.

Recommended Actions:

• No immediate blocking required; monitor for service changes
• Add to watchlist if future service activity is detected
• Standard logging recommended for baseline traffic analysis

IOC Status: Not a known malicious actor; no active campaigns correlated.

---

*Intelligence generated by IPDebrief Platform – Authorized SOC use only.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.