202.155.19.165📋 Copy

# IP INTELLIGENCE BRIEFING

## Subject: 202.155.19.165/32

## Classification: LOW RISK / INFRASTRUCTURE

## Date: Current

EXECUTIVE SUMMARY

IP address 202.155.19.165 presents as a low-risk web server infrastructure endpoint with no observable malicious activity. The address belongs to IRT-CRI-ID (ASN 138115) and operates under the RWIPXO network registration. No active threat indicators, blacklist entries, or attack campaigns were observed.

NETWORK OWNERSHIP & REGISTRATION

• Organization: IRT-CRI-ID
• ASN: 138115
• Netname: RWIPXO
• CIDR Block: 202.155.16.0/21
• RIR: APNIC
• Abuse Contact: Available via RDAP

GEOLOCATION DATA

• Country: US
• Geolocation Source: Consensus validated
• Note: Geolocation signals show US assignment with multi-signal inference

SERVICE & APPLICATION PROFILE

• Primary Service: Web Server
• Open Ports: 80/TCP (HTTP), 443/TCP (HTTPS), 22/TCP (SSH)
• Web Server: nginx/1.24.0 (Ubuntu)
• TLS Certificate: Let's Encrypt (CN=rizkyhidayat.web.id)
• Fingerprinted Domains:

- 202-155-19-165.domainesia.io

- rizkyhidayat.web.id

- www.rizkyhidayat.web.id

THREAT ASSESSMENT

• Risk Score: 0 (Low Risk)
• Abuse Confidence Score: None detected
• Blacklist Count: 0
• Threat Indicators: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Persistent Malicious Activity: No

NEIGHBORHOOD ANALYSIS

• Subnet: 202.155.19.0/24
• Abuse Density: 0 (Clean)
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 0
• Notable Neighbor: 202.155.19.8 (Risk Score: 0, Authority Score: 60)

OBSERVATION HISTORY

• Total Observations: 22 signals
• Recent Activity: Observed 2026-07-29
• Threat Persistence: 0 days
• Ownership Changes: 0
• Route Stability: Unstable (isRouteStable: false)
• Campaign Likelihood: None
• Cert Matches: 0
• Banner Matches: 0

NETWORK CLASSIFICATION FLAGS

• Cloud Infrastructure: No
• CDN: No
• VPN/Proxy: No
• Hosting Provider: No
• Mobile Carrier: No
• Residential: No
• Bogon: No
• Anycast: No

RECOMMENDED ACTIONS

No action required. The IP address presents no immediate threat indicators. Standard monitoring practices are sufficient.

SOC ANALYST NOTES

The IP 202.155.19.165 operates as a public web server with standard HTTPS and SSH services. The infrastructure shows typical web hosting characteristics with Let's Encrypt certificates and nginx web server. The subnet demonstrates low abuse density with one active sibling IP that also maintains a low-risk profile. No malicious activity, threat campaigns, or suspicious behaviors were observed across the available data sources.

---

*This intelligence briefing was generated using IPDebrief threat intelligence platform. Data accuracy reflects real-time observations and historical analysis.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.