103.30.195.72
## INTELLIGENCE BRIEFING: 103.30.195.72
Classification: LOW RISK | Report Date: 2026-07-29
---
EXECUTIVE SUMMARY
IP 103.30.195.72 is a low-risk web server endpoint associated with Indonesian hosting infrastructure (IRT-IDNIC-ID). The address operates standard web services (HTTP/HTTPS) behind CloudFlare CDN with nginx web server. No active threat indicators detected. Subnet abuse density is zero with no correlated malicious activity.
---
TECHNICAL PROFILE
- Risk Score: 25/100 (Low)
- ASN: 138608 | Organization: IRT-IDNIC-ID
- Network: 103.30.195.0/24 (APNIC RIR)
- Geolocation: Indonesia (ID) — Jakarta region
- Service: Web Server (HTTP/HTTPS + SSH)
- Open Ports: 80/tcp, 443/tcp, 22/tcp
SERVICE FINGERPRINT
- Web Server: nginx (HTTP/2.0 enabled)
- TLS Certificate: CloudFlare Origin SSL
- Protected Domains: *.vexora.my.id, vexora.my.id
- HSTS: Enabled (max-age=31536000)
- DNS: ip103-30-195-72.cloudhost.web.id
THREAT INDICATORS
- Blacklist Status: Listed on 1 of 8 DNSBLs (operator score: 0.1304)
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Campaign Association: None detected
- Malicious Persistence: No (threat observation count: 0)
NEIGHBORHOOD ANALYSIS
- Subnet Classification: Clean
- Abuse Density: 0%
- Sibling Count: 2 active
- Threat Siblings: 0
- Adjacent IP: 103.30.195.219 (Risk: 25, Authority: 50)
OBSERVATION HISTORY
20 historical signals tracked (most recent: 2026-07-29). Key signals include:
- Network trace successful (23 hops)
- HTTP/2 server fingerprint confirmed
- HSTS header present
- Geolocation resolution stable (APNIC, Jakarta)
- No ownership or threat persistence changes
RELATIONSHIP MAPPING
- Network: IANA-BLOCK (103.30.195.0/24)
- DNS Hostnames: ip103-30-195-72.cloudhost.web.id (4 associations)
- No external organization or certificate relationships
---
SOC ANALYST ACTIONS
Recommended Actions: None required at this time.
The IP demonstrates standard web hosting behavior with no malicious indicators. The single DNSBL listing appears to be a false positive or low-severity listing (operator score 0.1304). Subnet analysis confirms clean neighborhood with no correlated abuse.
Monitoring Priority: LOW | Block Recommendation: NO
*Note: Standard baseline monitoring sufficient. No immediate defensive actions required.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-IDNIC-ID |
| ASN | AS138608 |
| Network Name | IANA-BLOCK |
| CIDR Block | 0.0.0.0/0 |
| RIR | APNIC |
| Country | ID |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ip103-30-195-72.cloudhost.web.id |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | ip103-30-195-72.cloudhost.web.id |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | 1/2 domains |
| DMARC | 1/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.vexora.my.idvexora.my.id |
| Valid From | 2026-06-16T11:42:00+00:00 |
| Valid Until | 2041-06-12T11:42:00+00:00 |
🛡️ Public Network Snapshot
| Origin ASN | AS138608 |
| Network Prefix | 103.30.195.0/24 |
| Route mapping | Found |
| HSTS | Enabled |
| CSP | Not detected |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 21% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 25% | 2 | 4 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 23% | 2 | 2 |
| Overall | 17% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-20 18:35:06 UTC |
| Last Seen | 2026-09-03 21:42:09 UTC |
| Profile Built | 2026-09-03 21:49:57 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 34 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 103.30.195.72
Who owns the IP address 103.30.195.72?
103.30.195.72 is registered to IRT-IDNIC-ID. The address falls within the 0.0.0.0/0 network block. Registration is held at APNIC.
Where is 103.30.195.72 located?
Geolocation data places 103.30.195.72 in Indonesia. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 103.30.195.72 malicious or safe?
103.30.195.72 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 103.30.195.72?
The reverse DNS (PTR) record for 103.30.195.72 is ip103-30-195-72.cloudhost.web.id. This hostname is not forward-confirmed, so it should be treated as a weak signal.
What ports are open on 103.30.195.72?
Responsive ports observed on 103.30.195.72 include 80, 443, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.