103.30.194.55
# IP Intelligence Briefing: 103.30.194.55/32
## Executive Summary
The IP address 103.30.194.55 presents as a low-risk infrastructure host located in Indonesia, associated with IRT-IDNIC-ID (ASN 138608). Risk scoring indicates minimal threat posture with no active malicious indicators. The address operates as a multi-service host with standard HTTP and SSH services enabled.
## Threat Assessment
Risk Score: 15/100 (Low Risk)
| Category | Status | Details |
|---|---|---|
| Reputation | Low Risk | Provider/Authority/Stability scores: 0 |
| Malicious Activity | None | No known attacker indicators, not Tor exit, not spam source |
| Blacklist Status | Minimal | 1 DNSBL listing out of 8 total lists |
| Campaign Association | None | Zero correlated IPs, zero certificate matches |
## Infrastructure Profile
- ASN: 138608 (IRT-IDNIC-ID)
- Network: IANA-BLOCK (103.30.194.0/24)
- Geolocation: Indonesia (ID)
- PTR Record: ip103-30-194-55.cloudhost.web.id
- Domain: web.id
Service Analysis
- Port 80/TCP: HTTP service (Apache/2.4.52 Ubuntu)
- Port 22/TCP: SSH service (OpenSSH_8.9p1 Ubuntu)
- HTTP Status: 400
- TLS Certificate: Not configured
## Observed Behavior
Analysis of 21 historical observations reveals:
- Geolocation signals show Indonesia with 52% confidence (multi-signal inference)
- Network tracing confirms reachability (23 hops)
- Recent observations (2026-07-29) show stable characteristics
- No persistent malicious activity detected
## Network Context
- Subnet Classification: Clean (103.30.194.0/24)
- Abuse Density: 0%
- Threat Siblings: 0
- Active Siblings: 0
## Relationships
The IP exhibits DNS associations to ip103-30-194-55.cloudhost.web.id and maintains network-level relationships within the IANA-BLOCK allocation.
## Intelligence Recommendations
Priority: LOW
1. Monitoring: Continue baseline monitoring; no immediate action required
2. Firewall Rules: No specific blocking recommendations based on current risk profile
3. Investigation: Focus remains on standard network hygiene; no escalation warranted
## Conclusion
The IP 103.30.194.55/32 represents standard infrastructure hosting with minimal risk indicators. The combination of clean neighborhood data, absence of malicious campaign associations, and low-risk classification supports maintaining current security posture without intervention.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | ID-NIC HOSTMASTERS |
| ASN | AS138608 |
| Network Name | IANA-BLOCK |
| CIDR Block | 0.0.0.0/0 |
| RIR | APNIC |
| Country | ID |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ip103-30-194-55.cloudhost.web.id |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | ip103-30-194-55.cloudhost.web.id |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS138608 |
| Network Prefix | 103.30.194.0/24 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 5 |
| routing | 8% | 1 | 1 |
| services | 17% | 2 | 3 |
| ownership | 36% | 2 | 7 |
| reputation | 23% | 1 | 4 |
| geolocation | 23% | 2 | 4 |
| Overall | 23% | 10 | 24 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-20 18:35:06 UTC |
| Last Seen | 2026-09-23 19:58:49 UTC |
| Profile Built | 2026-09-22 02:36:41 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 27 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.30.194.55
Who owns the IP address 103.30.194.55?
103.30.194.55 is registered to ID-NIC HOSTMASTERS. The address falls within the 0.0.0.0/0 network block. Registration is held at APNIC.
Where is 103.30.194.55 located?
Geolocation data places 103.30.194.55 in Indonesia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.30.194.55 malicious or safe?
103.30.194.55 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 103.30.194.55?
The reverse DNS (PTR) record for 103.30.194.55 is ip103-30-194-55.cloudhost.web.id. This hostname is not forward-confirmed, so it should be treated as a weak signal.
What ports are open on 103.30.194.55?
Responsive ports observed on 103.30.194.55 include 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.