103.16.116.249📋 Copy

# IP Intelligence Briefing: 103.16.116.249

## Executive Summary

The IP address 103.16.116.249 is classified as Low Risk with a risk score of 25. Intelligence gathered indicates this is a legitimate web server infrastructure component operating within Indonesian network infrastructure, with no active threat indicators or malicious behavior patterns observed.

## Technical Profile

Network Assignment:

• ASN: 55688 (IRT-NGALUP-ID)
• Organization: IDNIC-NGALUP-ID
• CIDR Block: 103.16.116.0/23
• RIR: APNIC
• Registration: Network block assigned to Indonesian domain registry infrastructure

Geolocation:

• Country: Indonesia (ID)
• Accuracy Radius: 1500km
• Geo Source Count: 1
• Geo Consensus: True

Service Classification:

• Service Purpose: Web Server
• Connection Type: Non-residential, non-mobile, non-cloud, non-CDN infrastructure
• Network Role: Provider-assigned web hosting endpoint

## Network Infrastructure

Open Ports:

• 80/tcp (HTTP)
• 443/tcp (HTTPS)
• 22/tcp (SSH) - OpenSSH_8.2p1 Ubuntu-4ubuntu0.13

Service Fingerprinting:

• Web Server: nginx/1.27.5
• Application Framework: PHP/8.3.32
• TLS Certificate: Let's Encrypt (CN=YR2, O=Let's Encrypt, C=US)
• Certificate Subject: CN=jtiport.my.id
• Certificate SANs: jtiport.my.id, www.jtiport.my.id

Control Plane Indicators:

• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)
• Route Stability: False
• BGP Prefix: 103.16.116.0/24
• Route Changes (30d): 0

## Threat Assessment

Threat Indicators:

• Known Attacker Status: False
• Tor Exit Node: False
• Spam Source: False
• Blacklist Count: 0
• Threat Observation Count: 0
• Known Campaigns: None
• Persistently Malicious: False

Abuse Indicators:

• Abuse Confidence Score: Not applicable
• DNSBL Listed Count: 1
• DNSBL Total Lists: 8
• Threat Feeds: Empty

## Neighborhood Analysis

Subnet: 103.16.116.0/24

• Abuse Density: 0%
• High Risk Siblings: 0
• Medium Risk Siblings: 0
• Low Risk Siblings: 0
• Threat Siblings: 0
• Total Siblings: 0
• Active Siblings: 0

The IP resides in an isolated subnet with no neighboring threats or abuse patterns.

## Historical Observations

Signal History: 16 observations recorded

• Most Recent: 2026-07-26T18:17:18
• Ownership Changes: 0
• Threat Persistence Days: 0
• Observation Pattern: Consistent web server operations with stable HTTP/HTTPS responses

Response Metrics:

• Average Response Time: 2369ms
• HTTP Status Code: 200
• HTTP Version: 1.1
• HSTS: False
• CSP: False
• HTTP/2: False

## Relationship Graph

Connected Entities: 3 relationships identified

• All relationships classified as "Same Network" type
• All target: IDNIC-NGALUP-ID (network entity)
• No associations with external organizations, hostnames, or certificates

## Recommended Actions

Security Posture: No specific firewall rules or blocking recommendations generated based on current risk profile.

Monitoring Considerations:

• Response time of 2369ms may warrant application performance review
• SSH service (port 22) is exposed; verify access controls if not required
• Single DNSBL listing present; investigate if business operations impacted

## Intelligence Conclusion

IP 103.16.116.249 represents low-risk web hosting infrastructure operated by Indonesian network provider IRT-NGALUP-ID. The endpoint serves the domain jtiport.my.id with standard web server configurations. No malicious activity, threat indicators, or abuse patterns have been identified. The IP operates in an isolated subnet with no neighboring threat activity. Standard operational monitoring is recommended; no immediate defensive actions required.

---

*Intelligence compiled from IPDebrief platform data. All indicators subject to change based on ongoing network observations.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.