103.160.4.144
# IP Intelligence Briefing: 103.160.4.144
## Executive Summary
IP address 103.160.4.144 is classified as Low Risk (risk score: 25) with no active threat indicators. The IP belongs to Doan Huu Loi (ASN 140764, CSDGROUP-VN) and is geolocated to Vietnam. No malicious activity patterns have been detected.
## Profile Overview
| Attribute | Value |
|---|---|
| **Risk Score** | 25 (Low Risk) |
| **ASN** | 140764 |
| **Organization** | Doan Huu Loi (CSDGROUP-VN) |
| **CIDR Block** | 103.160.4.0/23 |
| **Country** | Vietnam (VN) |
| **Coordinates** | 16.17°N, 107.83°E |
| **Reputation** | Low Risk |
| **Service Purpose** | Firewalled / No Services |
## Threat Assessment
Threat Indicators: None detected
- Blacklist count: 0
- Not a Tor exit node
- Not a known attacker or spam source
- No known campaign associations
- Pulsedive risk: Null
DNS Analysis:
- No PTR hostnames resolved
- Forward resolution: Failed
- No hosted domains
- Email authentication: SPF/DMARC not configured
Services:
- No open ports detected
- No TLS certificate
- No HTTP service banners
Control Plane:
- Route stability: Unstable
- DNSSEC: Valid
- DNSBL listed: 1 of 8 lists
- Operator score: 0.1304 (Minimal)
## Neighborhood Analysis
Subnet: 103.160.4.0/24
- Abuse density: 0%
- Classification: Clean
- Total siblings: 2
- Active siblings: 1
- Threat siblings: 0
Neighbor: 103.160.4.157 (Risk Score: 25, Authority Score: 50)
## Relationship Graph
- Same Network: CSDGROUP-VN (103.160.4.0/23)
## Historical Observations
Fourteen observations recorded. Recent activity (2026-07-27) includes:
- HTTP 302 redirect responses
- OpenSSH 8.9p1 Ubuntu-3ubuntu0.16 banner on scanned ports
- TLS 1.3 with TLS_AES_256_GCM_SHA384 cipher suite
- Consistent Vietnam geolocation across probes
- Response time: 916ms
## Security Recommendations
No specific firewall rules or actions recommended based on current risk profile. The IP demonstrates standard infrastructure characteristics with no evidence of malicious behavior.
Suggested Action: Monitor but no immediate blocking required. Standard network logging and traffic analysis recommended.
---
*Report generated: Current date | Classification: Defensive Intelligence*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-VNNIC-AP |
| ASN | AS140764 |
| Network Name | CSDGROUP-VN |
| CIDR Block | 103.160.4.0/23 |
| RIR | APNIC |
| Country | VN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 80, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
CN=siem.bizcloud.vn was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | siem.bizcloud.vn |
| Valid From | 2026-04-03T01:36:34+00:00 |
| Valid Until | 2026-07-02T01:36:33+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
🛡️ Public Network Snapshot
| Origin ASN | AS140764 |
| Network Prefix | 103.160.4.0/24 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-15 16:15:37 UTC |
| Last Seen | 2026-09-29 20:34:20 UTC |
| Profile Built | 2026-09-28 21:03:22 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 27 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.160.4.144
Who owns the IP address 103.160.4.144?
103.160.4.144 is registered to IRT-VNNIC-AP. The address falls within the 103.160.4.0/23 network block. Registration is held at APNIC.
Where is 103.160.4.144 located?
Geolocation data places 103.160.4.144 in Singapore. The local time zone is Asia/Ho_Chi_Minh. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.160.4.144 malicious or safe?
103.160.4.144 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 103.160.4.144?
Responsive ports observed on 103.160.4.144 include 443, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.