183.171.154.8
IP Intelligence Briefing: 183.171.154.8
Date: June 17, 2026
---
**1. Core Profile**
- Risk Score: 55 (Moderate Risk)
- Ownership: Celcom Axiata Berhad (ASN 10030, APNIC)
- Geolocation: Kota Kinabalu, Sabah, Malaysia (4.21°N, 101.98°E)
- Network Role: Multi-service host (HTTP, SSH, HTTP-alt)
- Services:
- HTTP (Apache/2.4.38)
- SSH (SSH-2.0-SSH)
- HTTP-alt (port 8080)
- Threat Indicators: None detected (no malware, spam, or known attacker activity).
---
**2. Observation History**
- Recent Activity (June 17, 2026):
- Geolocation inferred with 52% confidence (4.21°N, 101.98°E).
- HTTP service active (Apache/2.4.38).
- Historical Data (June 2–11, 2026):
- SSH service operational with standard banner.
- No persistent malicious behavior or network anomalies.
- Threat observation count: 1 (non-critical).
---
**3. Network Relationships**
- Linked Entities:
- Subnet: 183.171.0.0/16 (CelcomNET)
- No direct ties to known malicious domains, organizations, or certificates.
- Network Classification:
- Provider: Celcom Axiata Berhad (APNIC)
- Infrastructure: Multi-service host (not CDN, cloud, or residential).
---
**4. Subnet Neighborhood**
- Subnet: 183.171.154.8/24
- Neighbor Analysis:
- 183.171.154.64: Risk score 55 (same as target).
- 183.171.154.91: Risk score 0.
- 183.171.154.22: No risk data.
- Abuse Density: 0% (low risk subnet).
---
**5. Recommendations**
- Monitor: Track 183.171.154.64 for potential correlation with this IP.
- Verify: Confirm if HTTP/SSH services are authorized internal assets.
- Baseline: Use historical data to detect anomalies (e.g., unexpected port activity).
- Firewall: Consider allowing traffic to this IP if it’s a legitimate server, but restrict non-essential ports (e.g., 8080).
Conclusion: This IP is associated with a corporate Malaysian network and shows no immediate malicious activity. However, its moderate risk score and shared subnet with similarly rated IPs warrant continued monitoring for behavioral changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Celcom Axiata Berhad |
| ASN | AS10030 |
| Network Name | CELCOMNET |
| CIDR Block | 183.171.0.0/16 |
| RIR | APNIC |
| Country | MY |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Multi-Service Host |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 22 | ssh | tcp | — |
| 8080 | http-alt | tcp | — |
| Closed Ports | 25, 443, 3389, 8443 (3 open / 7 scanned) | ||
| Server | Apache/2.4.38 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 26% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 25% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:03:59 UTC |
| Last Seen | 2026-06-23 00:10:23 UTC |
| Profile Built | 2026-06-23 00:53:27 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.