103.232.121.235
An IP intelligence assessment identified 103.232.121.235/32 as a Moderate Risk asset with a risk score of 50. The address was registered to ASN 56150 (Nguyen Huu Phuc, VHOSTCORP-VN) under APNIC, though geolocation sources disputed the country classification between Vietnam and Singapore. Network analysis revealed the host operated as a web server on ports 443 and 8443 using an nginx server banner and HTTP/2.0. TLS certificates issued by Let's Encrypt were associated with the domain mail.sales.tnicorporation.com.
Although the threat feed indicated no known campaigns or active attacker status, the system classification labeled the host as a "Suspicious Host" and assigned an "Unknown Intent" status. Route stability was flagged as false, and DNS hygiene scores were excellent with valid SPF and DMARC records. Despite the lack of specific threat indicators, the profile recommendation advised blocking traffic due to elevated risk from multiple threat signals. The following firewall rules were generated for mitigation: iptables, nginx, and pf rules to drop or deny traffic from the source IP.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Nguyen Huu Phuc |
| ASN | AS56150 |
| Network Name | VHOSTCORP-VN |
| CIDR Block | 103.232.120.0/22 |
| RIR | APNIC |
| Country | VN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 403c235.sieutocviet.vip |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 403c235.sieutocviet.vip |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/5 domains |
| DMARC | 2/5 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 5 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| 8443 | https-alt | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080 (2 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
CN=mail.sales.tnicorporation.com was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | mail.sales.tnicorporation.com |
| Valid From | 2026-05-18T10:22:57+00:00 |
| Valid Until | 2026-08-16T10:22:56+00:00 (expired) |
🛡️ Public Network Snapshot
| Origin ASN | AS56150 |
| Network Prefix | 103.232.121.0/24 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 5 |
| routing | 11% | 1 | 2 |
| services | 34% | 2 | 6 |
| ownership | 29% | 2 | 7 |
| reputation | 21% | 1 | 4 |
| geolocation | 21% | 2 | 4 |
| Overall | 26% | 10 | 28 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 02:45:56 UTC |
| Last Seen | 2026-09-11 21:46:39 UTC |
| Profile Built | 2026-09-10 21:32:42 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 48 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.232.121.235
Who owns the IP address 103.232.121.235?
103.232.121.235 is registered to Nguyen Huu Phuc. The address falls within the 103.232.120.0/22 network block. Registration is held at APNIC.
Where is 103.232.121.235 located?
Geolocation data places 103.232.121.235 in Singapore. The local time zone is Asia/Ho_Chi_Minh. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.232.121.235 malicious or safe?
103.232.121.235 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 103.232.121.235?
The reverse DNS (PTR) record for 103.232.121.235 is 403c235.sieutocviet.vip. This hostname is forward-confirmed, meaning it resolves back to the same address.
What ports are open on 103.232.121.235?
Responsive ports observed on 103.232.121.235 include 443, 8443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.