103.69.85.12📋 Copy

INTELLIGENCE BRIEFING: 103.69.85.12

Classification: Moderate Risk | Date: 2026-06-26

---

OWNERSHIP & INFRASTRUCTURE

• Organization: Vu Anh Tuan (NEWVINA-VN)
• ASN: 150884
• Network Block: 103.69.84.0/23 (APNIC RIR)
• Geolocation: Vietnam (VN)
• Service Status: Firewalled/No services detected

RISK ASSESSMENT

The IP addresses moderate risk profile (score: 40) with a mixed classification. The address appears on 2 of 8 DNS blacklists. Control plane analysis indicates routing instability (isRouteStable: false), suggesting potential network infrastructure changes or peering anomalies.

THREAT INDICATORS

• Not identified as Tor exit node, known attacker, or spam source
• Recent threat indicators detected via AlienVault OTX (confidence: 0.75) on 2026-06-26
• Subnet abuse density: 0.3333 (moderate)
• Neighboring IP analysis reveals 14 siblings with risk distribution: 0 high, 9 medium, 5 low

NETWORK BEHAVIOR

• No open ports or active services detected
• No TLS certificates or HTTP headers observed
• Historical scans indicate network probing activity
• PTR hostname resolution: None

NEIGHBORHOOD ANALYSIS

The /24 subnet (103.69.85.0/24) contains 15 total siblings with 5 identified as threat-siblings. Notable neighbors include:

• 103.69.85.10, 103.69.85.16, 103.69.85.28, 103.69.85.67: Risk score 55 (medium-high)
• 103.69.85.19, 103.69.85.24, 103.69.85.55, 103.69.85.64, 103.69.85.80: Risk score 40
• Multiple IPs at risk score 25 with authority score 50

RECOMMENDED ACTIONS

Firewall blocking rules for 103.69.85.12/32:

```bash

# iptables

iptables -A INPUT -s 103.69.85.12 -j DROP

# nftables

nft add rule inet filter input ip saddr 103.69.85.12 drop

# nginx

deny 103.69.85.12;

# Cloudflare WAF

Expression: ip.src eq 103.69.85.12

Action: BLOCK

# AWS WAF

Addresses: 103.69.85.12/32

```

INTELLIGENCE NOTES

The IP demonstrates persistent activity with 16 historical observations. Recent threat signals correlate with subnet-level abuse patterns. The organization operates within APNIC's Vietnam region with minimal operator score (0.1304). Network stability concerns warrant continued monitoring for routing changes or infrastructure modifications.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.