# IP Intelligence Briefing: 113.212.70.149
Classification: Moderate Risk | Data Source: IPDebrief
---
## Executive Summary
IP address 113.212.70.149 presents a moderate risk profile (Risk Score: 40) associated with Indonesian infrastructure provider IRT-DATAUTAMA-ID (DATAUTAMA-NET). The IP is geolocated to Jakarta, Indonesia, within the 113.212.68.0/22 network block. No active threat indicators were identified, but the IP resides in a high-abuse density subnet with 119 active siblings and 256 threat siblings in the /24 neighborhood.
---
## Infrastructure Profile
Ownership:
- Organization: IRT-DATAUTAMA-ID
- Network Name: DATAUTAMA-NET
- ASN: Not assigned
- CIDR Block: 113.212.68.0/22
- RIR: APNIC
Geolocation:
- Country: Indonesia (ID)
- Region: Jakarta
- City: Meruya Utara - Kembangan
- Accuracy Radius: 1,500 km
Network Classification:
- Service Purpose: Firewalled / No Services
- No open ports detected
- Not classified as cloud, CDN, VPN, proxy, or hosting infrastructure
---
## Threat Assessment
Threat Indicators:
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Count: 0
- DNSBL Listed: 1 of 8 lists
Operator Score: 0.2174 (Minimal)
Operator Label: Minimal
Risk Breakdown: Moderate (40/100)
---
## Neighborhood Analysis
Subnet: 113.212.70.149/24
- Abuse Density: 1
- Classification: High Abuse
- Total Siblings: 256
- Active Siblings: 119
- Threat Siblings: 256
Risk Distribution: 100 medium-risk neighbors (Risk Score: 40), 0 high-risk, 0 low-risk
The /24 subnet exhibits elevated abuse density with consistent medium-risk profiles across sibling IPs.
---
## Historical Observations
Observation Count: 49
Recent Activity: June 24, 2026
- 150ms average response time recorded
- Stable Indonesia geolocation confirmed
- Operator score consistently "Minimal" (0) across recent probes
- Ownership changes: 0
The IP shows stable operational characteristics with no recent escalation in threat indicators.
---
## Relationships
Total Relationships Identified: 154
- Primary association: DATAUTAMA-NET network
- Network-level relationships dominate the relationship graph
---
## Recommended Actions
Blocking Recommendation: Monitor with caution. While no direct threat indicators exist, the high-abuse subnet context warrants attention.
Firewall Rules: No immediate blocking required. Implement logging and monitoring for this IP range (113.212.68.0/22).
Investigation Priority: Medium โ due to neighborhood abuse density and high-abuse subnet classification.
---
## Conclusion
IP 113.212.70.149 is a firewalled infrastructure address from Indonesian provider DATAUTAMA-NET. The moderate risk score reflects neighborhood context rather than direct malicious activity. SOC teams should monitor traffic patterns from this subnet given the high-abuse classification of the /24 neighborhood, but no immediate blocking action is warranted based on current threat intelligence.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | IRT-DATAUTAMA-ID |
| ASN | โ |
| Network Name | DATAUTAMA-NET |
| CIDR Block | 113.212.68.0/22 |
| RIR | APNIC |
| Country | ID |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 20% | 2 | 3 |
| ownership | 24% | 2 | 3 |
| reputation | 27% | 1 | 3 |
| geolocation | 28% | 2 | 3 |
| Overall | 22% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-07 23:05:07 UTC |
| Last Seen | 2026-06-26 18:12:05 UTC |
| Profile Built | 2026-06-27 02:07:14 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 50 |
Full dossier details are available via our API.