INTELLIGENCE BRIEFING: IP 103.151.227.146/32
Classification: Low Risk | Date: 2026-07-29 | Analyst: IPDebrief Intelligence
---
**EXECUTIVE SUMMARY**
IP 103.151.227.146 presents a Low Risk profile (Score: 25/100) with no active threat indicators. The address is firewalled with no accessible services, though geolocation and ASN registration data show inconsistencies requiring operational awareness. No actionable blocking is currently recommended, but data validation is advised.
---
**NETWORK OWNERSHIP & REGISTRATION**
- ASN: 140429 (URBANACCESS-AS-ID - PT. MEDIA DISTRIBUSI PRIMA, ID)
- BGP Prefix: 103.151.227.0/24
- Registration Date: 2020-06-03
- RIR Registry: APNIC
- Route Stability: Unstable (isRouteStable: false)
- DNSSEC Validation: Valid
---
**GEOLOCATION ANALYSIS**
| Signal Source | Location |
|---|---|
| Primary Profile | US (New York, NY) |
| ASN Registration | ID (Indonesia) |
| **Note:** Geolocation discrepancy detected between profile (US) and ASN registry (ID). Requires operational validation. |
Control Plane Data:
- Hop Count: 14
- Transit Network: Comcast
- First Hop RTT: 0.2ms
- Last Hop RTT: 296.1ms
- Timed Out Hops: 1
---
**THREAT POSTURE**
- Risk Score: 25 (Low Risk)
- Abuse Confidence Score: N/A
- Blacklist Status: 1/8 DNSBL lists (noted in historical data)
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Known Campaigns: None detected
Behavioral Indicators:
- Honeypot Hits: 0
- Enumeration Strikes: 0
- WAF Violations: 0
- Total Incidents: 0
- Persistently Malicious: False
---
**NETWORK SERVICES**
- Open Ports: None detected
- Service Purpose: Firewalled / No Services
- TLS Certificate: None
- Hosted Domains: 0
- DNS Records: Forward resolution confirmed: No
---
**HISTORICAL OBSERVATIONS**
Total Signals: 8 observations
Latest Activity: 2026-07-29 12:09:34 UTC
Key Historical Signals:
- DNSSEC validation confirmed (2026-07-29)
- ASN 140429 registration data from Cymru DNS (2026-07-29)
- Geolocation and ownership signals: Data sufficiency 0.33 (limited coverage)
Temporal Analysis:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
---
**SUBNET ANALYSIS (103.151.227.0/24)**
- Total Siblings: 0
- Active Siblings: 0
- Threat Siblings: 0
- Abuse Density: 0
- Risk Distribution: No sibling risk data available
---
**RELATIONSHIP GRAPH**
- Linked Entities: None detected
- Associated Organizations: None
- Related Hostnames: None
- Certificates: None
---
**RECOMMENDED ACTIONS**
No specific blocking actions are currently recommended based on the risk profile. However, the following operational considerations apply:
1. Geolocation Validation: Investigate the US vs Indonesia discrepancy between profile and ASN registration data
2. DNSBL Monitoring: Monitor for changes in blacklist status (currently 1/8 lists)
3. Route Stability: Note unstable BGP routing for prefix 103.151.227.0/24
4. Service Monitoring: Continue monitoring for service discovery (currently firewalled)
---
**SOC INTELLIGENCE ASSESSMENT**
This IP address represents minimal immediate threat to defensive operations. The primary concern is data inconsistency between geolocation and ASN registration data, which may impact incident correlation efforts. No blocking or mitigation actions are required at this time. Continue standard monitoring procedures.
Confidence Level: Moderate (data sufficiency: 0.33)
Recommended Priority: Low
---
*Intel generated by IPDebrief Threat Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | IRT-URBANACCESS-ID |
| ASN | AS140429 |
| Network Name | URBANACCESS-ID |
| CIDR Block | 103.151.226.0/23 |
| RIR | APNIC |
| Country | ID |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | nginx/1.24.0 (Ubuntu) |
| HTTP Title | โ |
๐ TLS Certificate
CN=admin-web.smkn4bdg.sch.id was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | admin-web.smkn4bdg.sch.id |
| Valid From | 2026-05-13T10:58:24+00:00 |
| Valid Until | 2026-08-11T10:58:23+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 0633F0BB21783D68EB141831C7FCC95A9ACF |
| Thumbprint | 910779EA669DEBD241EC653B7B23E05CD995D127 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 8% | 2 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-22 07:14:56 UTC |
| Last Seen | 2026-07-29 12:09:21 UTC |
| Profile Built | 2026-07-29 12:21:55 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 18 |
Full dossier details are available via our API.