103.158.121.159
# IP Intelligence Briefing: 103.158.121.159/32
Date: 2026-07-26
Classification: Defensive Security Intelligence
Status: Low Risk
---
## Executive Summary
IP address 103.158.121.159 is classified as Low Risk with a risk score of 0. The address is assigned to IRT-CDNNET-ID (AS141127) within the Indonesian network 103.158.121.0/24. No active threat indicators, blacklist entries, or malicious campaigns have been observed. The IP shows no open services and is currently firewalled with no accessible ports.
---
## Network Profile
| Attribute | Value |
|---|---|
| **IP Address** | 103.158.121.159/32 |
| **ASN** | AS141127 |
| **Organization** | IRT-CDNNET-ID |
| **Network Name** | IDNIC-CDNNET-ID |
| **Country** | Indonesia (ID) |
| **Region/City** | Jawa Barat, Indramayu |
| **CIDR Block** | 103.158.121.0/24 |
| **RIR** | APNIC |
| **Risk Score** | 0 |
| **Reputation** | Low Risk |
| **Abuse Confidence** | N/A |
---
## Threat Assessment
- Blacklist Status: Not listed on any threat feeds
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Open Ports: None detected
- HTTP Services: None accessible
- TLS Certificates: None found
---
## Control Plane Analysis
| Metric | Value |
|---|---|
| BGP Prefix | 103.158.121.0/24 |
| Origin ASN | 141127 |
| Route Stability | Stable |
| RPKI State | Not Available |
| DNSSEC Valid | Yes |
| Operator Score | 0.1304 (Minimal) |
---
## Historical Observations
A total of 16 signal observations were recorded. Recent analysis indicates:
- Current Classification: Clean
- Subnet Abuse Density: 0
- Threat Persistence Days: 0
- Persistently Malicious: No
- Most Recent Observation: 2026-07-26T18:19:18 UTC
No escalation in risk profile has been observed over the monitoring period.
---
## Subnet Context (103.158.121.0/24)
The /24 subnet contains 16 total sibling IP addresses:
| Risk Distribution | Count |
|---|---|
| High Risk | 0 |
| Medium Risk | 2 |
| Low Risk | 12 |
Notable Neighbors:
- 103.158.121.144: Risk Score 25
- 103.158.121.147: Risk Score 50
- 103.158.121.149: Risk Score 25
- 103.158.121.153: Risk Score 25
- 103.158.121.156: Risk Score 55
The subnet demonstrates minimal abuse density with scattered low-to-moderate risk activity across sibling addresses.
---
## Relationships
The IP maintains network-level relationships with:
- IDNIC-CDNNET-ID (Same Network)
---
## Recommended Actions
Based on the current risk profile, no immediate firewall or blocking actions are required. The IP presents no observable threat activity.
Suggested Monitoring:
- Continue passive observation
- Monitor subnet-level abuse trends
- Review neighbor activity patterns if related traffic detected
---
## Conclusion
IP 103.158.121.159 is a clean, low-risk address with no active threat indicators. The subnet shows minimal abuse density, with only scattered medium-risk neighbors. No immediate defensive actions are recommended beyond standard monitoring practices.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-CDNNET-ID |
| ASN | AS141127 |
| Network Name | IDNIC-CDNNET-ID |
| CIDR Block | 103.158.121.0/24 |
| RIR | APNIC |
| Country | ID |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS141127 |
| Network Prefix | 103.158.121.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 6 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 08:21:17 UTC |
| Last Seen | 2026-09-01 00:52:44 UTC |
| Profile Built | 2026-09-01 00:54:06 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.158.121.159
Who owns the IP address 103.158.121.159?
103.158.121.159 is registered to IRT-CDNNET-ID. The address falls within the 103.158.121.0/24 network block. Registration is held at APNIC.
Where is 103.158.121.159 located?
Geolocation data places 103.158.121.159 in Indramayu, Jawa Barat,, Indonesia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.158.121.159 malicious or safe?
103.158.121.159 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.