210.79.191.178
IP Intelligence Briefing: 210.79.191.178
Date: 2026-05-30
---
**1. Core Profile**
- Risk Score: 0 (Low Risk)
- Ownership:
- ASN: 136052 (IRT-KEBUNA-ID)
- RIR: APNIC
- Geolocation: Sukabumi, Jawa Barat, Indonesia (latitude: -6.175, longitude: 106.8286)
- Network Role: Web server (HTTP/HTTPS, SSH) with LiteSpeed server banner.
- Threat Indicators: No malicious activity detected (no malware, C&C, spam, or blacklisted IPs).
---
**2. Observation History**
- Recent Activity (2026-05-30):
- HTTP/HTTPS services with LiteSpeed server (no vulnerabilities detected).
- DNS: PTR hostname `ip210-79-191-178.cloudhost.web.id` linked to domain `web.id`.
- Geolocation validation confirmed (RTT: 263.6ms, ~11,242km from probe).
- Trends: No significant changes in risk or activity over the past 30 days.
---
**3. Relationships**
- Linked Entities:
- DNS: `ip210-79-191-178.cloudhost.web.id` (no malicious domains detected).
- Same network: ASN 136052 (IRT-KEBUNA-ID).
- Certificates: TLS certificate issued to `toprankingdomains.info` (self-signed, no revoked certificates).
---
**4. Neighborhood Analysis**
- Subnet: 210.79.191.0/24
- Abuse Density: 18.18% (mostly clean).
- Neighbor Risk:
- 6 IPs with moderate risk (25–50 score).
- 4 IPs with low risk.
- Notable Neighbors:
- 210.79.191.170, 210.79.191.174, and 210.79.191.227 show moderate risk.
---
**5. Recommendations**
- Monitor Subnet: The 210.79.191.0/24 subnet has 6 moderate-risk neighbors; investigate potential lateral movement.
- Check DNS: Analyze `cloudhost.web.id` for misconfigurations or hidden malicious subdomains.
- Baseline Activity: No immediate threats, but maintain monitoring for unexpected changes in service banners or DNS records.
---
End of Briefing
*Generated by IPDebrief Threat Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-KEBUNA-ID |
| ASN | AS136052 |
| Network Name | IDNIC-KEBUNA-ID |
| CIDR Block | 210.79.190.0/23 |
| RIR | APNIC |
| Country | ID |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ip210-79-191-178.cloudhost.web.id |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | ip210-79-191-178.cloudhost.web.id |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | LiteSpeed |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11 |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2024-11-02T09:41:14+00:00 |
| Valid Until | 2034-10-31T09:41:14+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 3650 days |
| Serial Number | 265AE9B9AB5A6D6CE326A9CEBEC15B07E08F17CF |
| Thumbprint | 43E32D098638F0EA47B04A3E582BD0BD58E4C72C |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 19% | 1 | 2 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 27% | 10 | 19 |
| Data Coherence | Mixed Signals (68%) — 2 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ TLS certificate claims US but primary geo says ID
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-14 13:24:27 UTC |
| Last Seen | 2026-06-07 06:07:45 UTC |
| Profile Built | 2026-06-07 06:12:14 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 24 |
Full dossier details are available via our API.