113.212.70.4📋 Copy

IP INTELLIGENCE BRIEFING: 113.212.70.4

Classification: Moderate Risk (Score: 40/100)

Date: Current

Assessment: Network infrastructure with elevated neighborhood-level risk indicators

OWNERSHIP & NETWORK:

The IP address is registered to IRT-DATAUTAMA-ID under the DATAUTAMA-NET network name within the APNIC RIR (113.212.68.0/22 block). Network classification indicates no open services, with the connection type reported as "Firewalled / No Services." No ASN or mobile carrier data is available.

GEOLOCATION:

Geolocation data points to Jakarta, Indonesia (Meruya Utara - Kembangan region). Geographic consensus is valid with plausible location markers. Distance validation encountered ICMP blocking issues.

THREAT INDICATORS:

No direct threat indicators identified. The IP is not flagged as a Tor exit node, known attacker, or spam source. Blacklist count stands at zero. However, DNSBL listing exists on 1 of 8 total DNSBL lists. No known threat campaigns or associated indicators present in current data.

NETWORK BEHAVIOR & SERVICES:

No open ports detected on the target IP. TLS certificates, HTTP services, and server banners are absent. DNS PTR records and forward resolution are unavailable. No email authentication records (SPF/DMARC) configured.

NEIGHBORHOOD CONTEXT (113.212.70.0/24):

Subnet assessment reveals elevated risk environment:

• Abuse density: High
• Classification: high_abuse
• Total siblings: 256
• Active siblings: 94
• Threat siblings: 256
• Inherited risk: 40
• Neighbor risk distribution: 0 high/86 medium/14 low
• Risk score for neighbors: 40 (authority: 50)

HISTORICAL OBSERVATIONS:

42 observations recorded. Recent data shows fluctuating abuse density metrics. Most recent observation (2026-06-24) indicates "high_abuse" classification with 54.3% abuse density. Operator score rated "Minimal" (0.1304). No persistent malicious behavior confirmed.

RECOMMENDED ACTIONS:

• Monitor for changes in service exposure (no current services detected)
• Consider blocking if threat indicators develop
• Review neighborhood-level activity patterns
• No immediate blocking recommended based on current risk profile (score: 40)

SOC NOTES:

This IP represents network infrastructure under firewall protection with no currently exposed services. The elevated neighborhood abuse density suggests the subnet warrants ongoing monitoring. No direct attack indicators present at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.