111.94.106.133📋 Copy

# IP Intelligence Briefing: 111.94.106.133/32

Date: July 29, 2026

Classification: LOW RISK / MONITOR

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 111.94.106.133 is classified as Low Risk with an overall risk score of 15/100. The endpoint is associated with Indonesian ISP FastNet (ASN 23700) and shows no active threat indicators. While the subnet exhibits moderate abuse density (0.5), the specific IP remains clean with no malicious activity observed. Recommended action: Monitor but no blocking required.

---

## Technical Profile

Ownership & Registration:

• ASN: 23700 (FastNet)
• Organization: Rony Ardhitia Soetedjo
• Network: FastNet (111.94.106.0/24)
• RIR: APNIC
• Abuse Contact: Not publicly listed

Geolocation:

• Country: Indonesia (ID)
• Region: West Java
• City: Bekasi
• Coordinates: -0.79, 113.92 (1500km accuracy radius)

Network Services:

• Status: Firewalled / No Services
• Open Ports: None detected
• TLS Certificates: None
• HTTP Title: None
• DNS PTR: fm-dyn-111-94-106-133.fast.net.id

---

## Threat Intelligence Assessment

Threat Indicators:

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• Threat Feeds: None
• Known Campaigns: None

Control Plane:

• BGP Prefix: 111.94.96.0/19
• Route Stability: Unstable
• DNSBL Lists: 1 of 8 (minor listing)
• RPKI State: Not verified
• IRR Consistency: Not verified

---

## Neighborhood Analysis

Subnet: 111.94.106.133/24

• Abuse Density: 0.5 (50%)
• Classification: Mostly Clean
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 1
• Inherited Risk: 2

Neighbor IP:

• 111.94.106.24: Risk Score 15 (Low Risk, Authority Score 50)

---

## Historical Observations

18 observations tracked with consistent signal patterns:

• Network Classification: Consistently "mostly_clean"
• Ownership Stability: No changes recorded
• Threat Persistence: 0 days (no persistent malicious activity)
• Threat Observations: 1 total observation recorded
• Geolocation Signals: Multiple inference sources confirming Indonesia location

---

## Relationship Graph

• Same Network: FastNet (3 entries)
• DNS Association: fm-dyn-111-94-106-133.fast.net.id (3 entries)

No organization-level or certificate relationships detected.

---

## Recommended Actions

Firewall/Security Recommendations:

• No blocking recommended
• Allow with standard logging
• Monitor for service changes

Rationale: The IP shows no malicious indicators, is properly registered with Indonesian ISP infrastructure, and the subnet exhibits low-risk characteristics. The single DNSBL listing appears minor and does not indicate active abuse.

---

## Intelligence Narrative

The endpoint 111.94.106.133 operates as a residential or dynamic IP within FastNet's Indonesian infrastructure. Historical data confirms stable ownership and consistent geolocation signals. The IP's service classification indicates it is firewalled with no active services, which is typical for residential dynamic addresses. While the /24 subnet shows a 50% abuse density, the specific IP remains clean with no threat indicators. The single neighboring IP (111.94.106.24) shares a similar low-risk profile. No correlation with known campaigns or attacker infrastructure detected.

Status: Legitimate residential/dynamic endpoint requiring standard monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.