# 103.186.1.158 — IP Intelligence Summary

103.186.1.158 is an IPv4 address operated by Iman Sukma Firmansyah (AS136052), geolocated to Sukabumi, Indonesia. Its reverse DNS name is ip103-186-1-158.cloudhost.web.id. As of October 1, 2026, IPDebrief rates it Moderate Risk (65/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/103.186.1.158
- Last updated: 2026-10-01

## Ownership

- Organization: Iman Sukma Firmansyah
- Network name: IDNIC-ANSA-ID
- Allocated block: 103.186.0.0/23
- ASN: AS136052 (https://ipdebrief.com/asn/136052)
- Regional registry: APNIC

## Location

- City: Sukabumi
- Region: Citamiang
- Country: Indonesia
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (65/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ip103-186-1-158.cloudhost.web.id
- Forward-confirmed: no

## Analyst narrative

\# IPDEBRIEF INTELLIGENCE BRIEFING

**Subject:** 103.186.1.158/32

**Classification:** Moderate Risk

**Report Date:** 2026-07-22

\---

\## EXECUTIVE SUMMARY

IP address 103.186.1.158 is a moderate-risk (risk score: 40) residential infrastructure endpoint located in Sukabumi, Indonesia. The IP is associated with ASN 136052 (Iman Sukma Firmansyah) under the IDNIC-ANSA-ID network. No active threat indicators, known campaigns, or blacklist entries were observed. The endpoint shows minimal operator-level risk (operator score: 0.1304) and no persistent malicious behavior.

\---

\## OWNERSHIP & GEOLOCATION

| Attribute | Value |

|-----------|-------|

| **ASN** | 136052 |

| **Organization** | Iman Sukma Firmansyah |

| **Network** | IDNIC-ANSA-ID |

| **CIDR Block** | 103.186.0.0/23 |

| **Country** | Indonesia (ID) |

| **Region/City** | Citamiang, Sukabumi |

| **RIR** | APNIC |

| **Abuse Contact** | abuse@ansaproject.my.id |

**Geolocation Validation:** Geographic data sourced from multiple providers (geo consensus confirmed). Coordinates inferred at -0.79, 113.92 with 1500km accuracy radius.

\---

\## NETWORK CHARACTERISTICS

**Service Status:** Firewalled / No Services Detected

**Open Ports:** None

**DNS Records:**

\- PTR: ip103-186-1-158.cloudhost.web.id

\- Forward Resolution: ip103-186-1-158.cloudhost.web.id

\- Forward Confirmed: No

\- SPF/DMARC: Not configured

**BGP Control Plane:**

\- Route Stable: No

\- Route Changes (30d): 0

\- MOAS: No

\- DNSSEC Valid: Yes

\---

\## THREAT ASSESSMENT

| Indicator | Status |

|-----------|--------|

| **Risk Score** | 40 (Moderate) |

| **Known Attacker** | No |

| **Spam Source** | No |

| **Tor Exit Node** | No |

| **Blacklist Count** | 0 |

| **DNSBL Listed** | 2 of 8 lists |

| **Honeypot Hits** | 0 |

| **Campaign Matches** | 0 |

**Threat Evidence:** No active threat indicators identified. No association with known malicious campaigns or threat feeds.

\---

\## OBSERVATION HISTORY

**Total Observations:** 14 signals

**Recent Activity:** 2026-07-22 (most recent)

**Ownership Stability:** 0 ownership changes (stable)

**Threat Persistence:** 0 days

**Persistently Malicious:** No

Observations show consistent geolocation and ownership data with no significant temporal shifts in threat profile.

\---

\## SUBNET ANALYSIS (103.186.1.0/24)

**Total Neighbors:** 8

**Abuse Density:** 0%

**Risk Distribution:**

\- High Risk: 0

\- Medium Risk: 8

\- Low Risk: 0

**Notable Neighbor IPs:**

\- 103.186.1.103 (Risk: 65)

\- 103.186.1.197 (Risk: 65)

\- All remaining siblings: Risk 40

The /24 subnet demonstrates uniform medium-risk classification with no high-risk outliers.

\---

\## RELATIONSHIP GRAPH

**Connected Entities:**

1. **Network:** IDNIC-ANSA-ID (Same Network)

2. **DNS Hostnames:**

\- ip103-186-1-158.cloudhost.web.id (DNS Association)

No additional organizational or certificate relationships detected.

\---

\## RECOMMENDED ACTIONS

**Risk Score:** 40 — Blocking recommended based on current risk profile.

**Firewall Rules (Approved):**

\`\`\`bash

\# iptables

iptables -A INPUT -s 103.186.1.158 -j DROP

\# nftables

nft add rule inet filter input ip saddr 103.186.1.158 drop

\# nginx

deny 103.186.1.158;

\# pfSense

103.186.1.158/32

\# Cloudflare WAF

{

"description": "Block 103.186.1.158 — IPDebrief risk score 40",

"action": "block",

"filter": {

"expression": "ip.src eq 103.186.1.158"

}

}

\# AWS WAF

{

"Addresses": \["103.186.1.158/32"\],

"Description": "IPDebrief risk 40"

}

\`\`\`

\---

\## ANALYST NOTES

This IP represents residential infrastructure with moderate risk classification. While no active malicious indicators are present, the moderate risk score (40) combined with the subnet's uniform medium-risk profile warrants blocking per organizational security policy. Monitor for changes in DNSBL listings or threat indicator emergence.

## Nearby addresses

- 103.186.1.20 (https://ipdebrief.com/103.186.1.20)
- 103.186.1.59 (https://ipdebrief.com/103.186.1.59)
- 103.186.1.91 (https://ipdebrief.com/103.186.1.91)
- 103.186.1.103 (https://ipdebrief.com/103.186.1.103)
- 103.186.1.141 (https://ipdebrief.com/103.186.1.141)
- 103.186.1.150 (https://ipdebrief.com/103.186.1.150)
- 103.186.1.155 (https://ipdebrief.com/103.186.1.155)
- 103.186.1.169 (https://ipdebrief.com/103.186.1.169)
- 103.186.1.197 (https://ipdebrief.com/103.186.1.197)

---

Source: IPDebrief, "103.186.1.158 IP intelligence", https://ipdebrief.com/103.186.1.158, updated 2026-10-01. Assessments are probabilistic.