111.94.200.166📋 Copy

# IP Intelligence Briefing: 111.94.200.166/32

## Executive Summary

IP address 111.94.200.166 presents a LOW RISK profile with an overall risk score of 25. The address belongs to FastNet (ASN 23700) and is geolocated to South Tangerang, Banten, Indonesia. No active threat indicators were observed, and the subnet shows zero abuse density. The IP is currently firewalled with no open services detected.

---

## Ownership and Network Classification

• Organization: Rony Ardhitia Soetedjo / FastNet
• ASN: 23700
• CIDR Block: 111.94.200.0/24
• RIR: APNIC
• Geolocation: South Tangerang, Banten, Indonesia (ID)
• Classification: Infrastructure (Firewalled / No Services)

---

## Threat Profile

• Reputation Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Threat Indicators: None detected across all monitored threat feeds.

---

## Network Behavior and Routing

• BGP Prefix: 111.94.192.0/19
• AS Path: 34549 → 1299 → 7632 → 23700
• Route Stability: Unstable (3 route changes in 30 days)
• MoAS: No
• RPKI State: Not validated
• DNSBL Listings: 1 out of 8 total checks

---

## Services and DNS

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• PTR Hostname: fm-dyn-111-94-200-166.fast.net.id
• Forward Resolution: Confirmed (1 hostname)
• Email Auth: SPF and DMARC not configured

---

## Historical Observation Summary

Eighteen signal observations recorded over the monitoring period. Key findings include:

• Network routing observed with multiple ASNs in transit path
• ICMP validation blocked (unable to validate geolocation)
• Inferred geolocation confidence: 0.52 with 1500km accuracy radius
• No persistent malicious activity detected
• Threat observation count: 0
• Persistence days: 0

---

## Neighborhood Analysis

Subnet 111.94.200.0/24 analysis indicates:

• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0 (Clean)
• Inherited Risk: 0
• Classification: Clean

---

## Relationships

Ten relationships identified:

• Multiple "Same Network" relationships to FastNet network
• DNS associations to fm-dyn-111-94-200-166.fast.net.id

---

## Recommended Actions

No immediate security actions required based on current risk profile. The IP shows no malicious indicators and belongs to a low-abuse-density subnet. Monitor for any changes in routing stability or emergence of open services.

Classification: LOW RISK – No immediate action required. Routine monitoring recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.