103.158.121.150📋 Copy

# INTELLIGENCE BRIEFING: 103.158.121.150/32

## Executive Summary

IP 103.158.121.150 is classified as Low Risk with a risk score of 15/100. The address belongs to Indonesian infrastructure provider IDNIC-CDNNET-ID (ASN: 141127) and is geolocated to Indramayu, Jawa Barat. No active threat indicators, malicious campaigns, or blacklist entries were detected. The subnet demonstrates minimal abuse density.

## Technical Profile

Ownership & Network:

• ASN: 141127 (IRT-CDNNET-ID)
• Organization: IDNIC-CDNNET-ID
• CIDR Block: 103.158.121.0/24
• RIR: APNIC
• Registration: IDNIC-CDNNET-ID

Geolocation:

• Country: Indonesia (ID)
• Region: Jawa Barat
• City: Indramayu
• Distance: 11,242.8 km from probe location
• Status: Geo-validated (ICMP blocked - unable to validate)

Network Classification:

• Status: Firewalled / No Services
• Open Ports: None detected
• DNS PTR: None resolved
• Email Auth: No SPF/DMARC records
• SSL/TLS: No certificates detected
• DNSBL Listed: 1 of 8 total checks

## Threat Assessment

Current Threat Indicators:

• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None
• Threat Feeds: Empty

Control Plane:

• Route Stability: Unstable (isRouteStable: false)
• RPKI State: Not validated
• DNSSEC: Valid
• BGP Prefix: 103.158.121.0/24

## Observation History

Signals Collected: 18 total observations

Key Observations:

• Recent geographic signals indicate routing through US infrastructure (Denver, US-CO)
• Subnet analysis shows clean classification with 0 abuse density
• No ownership changes recorded
• No persistent malicious behavior detected
• Threat observation count: 0
• Persistence Classification: Not persistently malicious

## Neighborhood Analysis

Subnet: 103.158.121.0/24

• Total Siblings: 16
• Active Siblings: 2
• Threat Siblings: 0
• Abuse Density: 0%
• Classification: Clean

Risk Distribution in Subnet:

• High Risk (50+): 1 IP (103.158.121.156 - Score: 55)
• Medium Risk (25-49): 2 IPs (103.158.121.147 - Score: 50; 103.158.121.153 - Score: 25)
• Low Risk (0-24): 12 IPs

Notable High-Risk Neighbors:

• 103.158.121.156 (Risk: 55)
• 103.158.121.147 (Risk: 50)
• 103.158.121.144 (Risk: 25)
• 103.158.121.149 (Risk: 25)
• 103.158.121.153 (Risk: 25)

## Relationship Graph

Connected Entities: 6 relationships identified

• All relationships point to network entity: IDNIC-CDNNET-ID
• No external network, organization, or certificate relationships detected

## Recommended Actions

Current Risk Level: Low (15/100)

• No specific firewall rules or blocking recommendations generated
• Standard monitoring practices recommended
• No immediate mitigation actions required

Monitoring Guidance:

• Track subnet 103.158.121.0/24 for emerging activity from higher-risk neighbors
• Monitor for any change in network classification from "Firewalled/No Services"
• Review 103.158.121.156 (Risk: 55) for potential correlation if attacks observed

## Conclusion

IP 103.158.121.150 represents a low-risk Indonesian infrastructure address with no active threat indicators. The subnet demonstrates minimal abuse density and clean classification. The IP is not associated with known malicious campaigns, blacklists, or persistent malicious behavior. Standard monitoring practices are sufficient; no immediate defensive actions are warranted.

*Report generated: 2026-07-26*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.