# IP Intelligence Briefing: 116.212.142.235
Classification: Low Risk | Reputation Score: 25/100 | Status: Monitored
---
## Executive Summary
IP address 116.212.142.235 is associated with IRT-MEKONGNET-KH (ASN 38235) within the MEKONGNET network (116.212.142.0/24) in Phnom Penh, Cambodia. The IP presents minimal threat indicators with a low-risk classification. No active malicious campaigns, known attacker associations, or spam source designations were identified.
## Risk Assessment
- Overall Risk Score: 25 (Low Risk)
- Abuse Confidence Score: Not applicable
- Blacklist Status: Not listed (0/0)
- Threat Indicators: None detected
- Persistence Status: No persistent malicious activity observed
- Operator Score: 0.1304 (Minimal)
## Network Classification
- Infrastructure Type: Firewalled / No Services
- Network Role: Residential/Infrastructure endpoint
- Service Status: No open ports detected
- DNS Configuration: No PTR records, forward resolution unconfirmed
- Cloud/CDN/Proxy: Negative across all categories
- DNSSEC: Valid
- Route Stability: Unstable (route changes observed in 30-day window)
## Control Plane Data
- Origin ASN: 38235
- BGP Prefix: 116.212.142.0/24
- RPKI State: Not validated
- IRR Consistency: Not assessed
- Route Changes (30d): 0
- DNSBL Listed: 1 of 8 lists
## Geographic Context
- Country: Cambodia (KH)
- City: Phnom Penh
- Coordinates: 11.56°N, 104.91°E
- Geo Consensus: Confirmed (1 source)
- Geo Plausibility: False (validation pending)
## Relationship Analysis
- Network Affiliation: MEKONGNET (2 relationships identified)
- No associations with: Hostnames, organizations, certificates, or related IPs beyond network peers
## Neighborhood Analysis
- Subnet: 116.212.142.0/24
- Abuse Density: 0 (no neighboring threats)
- Active Siblings: 0
- Threat Siblings: 0
- Sibling Classification: Low risk across subnet
## Historical Observations
- Total Signals: 11 observations
- Ownership Changes: 0
- Threat Persistence Days: 0
- Campaign Correlations: 0
- Latest Observation: 2026-07-23T22:30:54+00:00
- Signal Types: Ownership, network role, organization, geolocation, operator score
## Recommended Actions
No immediate mitigation required. The IP presents minimal threat characteristics with no active malicious indicators. Standard monitoring protocols apply.
---
Generated: IPDebrief Intelligence Platform
Confidence Level: High (based on comprehensive profile data)
Action Priority: Monitor (low)
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-MEKONGNET-KH |
| ASN | AS38235 |
| Network Name | MEKONGNET |
| CIDR Block | 116.212.142.0/24 |
| RIR | APNIC |
| Country | KH |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS38235 |
| Network Prefix | 116.212.142.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-05 23:57:43 UTC |
| Last Seen | 2026-08-27 07:32:26 UTC |
| Profile Built | 2026-08-29 05:16:44 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 18 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 116.212.142.235
Who owns the IP address 116.212.142.235?
116.212.142.235 is registered to IRT-MEKONGNET-KH. The address falls within the 116.212.142.0/24 network block. Registration is held at APNIC.
Where is 116.212.142.235 located?
Geolocation data places 116.212.142.235 in Phnom Penh, Phnom Penh, KH. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 116.212.142.235 malicious or safe?
116.212.142.235 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.