119.15.88.111📋 Copy

## IP Intelligence Briefing: 119.15.88.111/32

Classification: Low Risk | Risk Score: 25/100 | Status: Active Monitoring

---

Executive Summary

IP address 119.15.88.111 belongs to Cambodia's national telecommunications infrastructure and demonstrates minimal threat characteristics. No active malicious indicators, open services, or known attack associations detected. The subnet exhibits zero abuse density with no sibling threat activity.

---

Ownership and Geolocation

• Organization: STM_POP (IRT-WICAM-KH)
• ASN: 24492
• CIDR Block: 119.15.88.0/24
• RIR: APNIC
• Location: Phnom Penh, Cambodia (KH)
• Coordinates: 11.56°N, 104.91°E

---

Network Classification

• Infrastructure Type: Firewalled / No Services
• Service Categories: None detected
• Provider Status: Null
• Connection Type: Unknown
• Special Classifications: Not Cloud, CDN, VPN, Proxy, Tor, Hosting, Mobile, or Residential

---

Threat Intelligence Assessment

Threat Indicators: None

• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Known Campaigns: None
• Threat Persistence: 0 days observed

Control Plane Data:

• DNSSEC Valid: Yes
• DNSBL Listed: 1 of 8 lists
• Route Stability: 0 route changes (30-day window)
• Operator Score: 0.1304 (Minimal)
• RPKI State: Not evaluated

---

Service Enumeration

• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• Hosted Domains: 0
• Email Authentication: SPF/DMARC not configured

---

Historical Analysis

Observation Window: 11 signals recorded

Latest Activity: 2026-07-25T15:26:45+00:00

• Geolocation Signals: Consistent Phnom Penh reporting (maxmind-geolite2-city)
• Ownership Changes: 0
• Threat Observation Count: 0
• Persistently Malicious: False

Temporal analysis indicates stable ownership with no persistent malicious behavior patterns.

---

Network Neighborhood

Subnet: 119.15.88.0/24

• Total Siblings: 0 detected
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0
• Risk Distribution: 0 high / 0 medium / 0 low

No adjacent IP activity or correlated threats in the /24 neighborhood.

---

Relationships Graph

Connected Entities: 1

• Same Network: STM_POP (network-level association)

No hostname, certificate, or organizational relationships beyond network-level classification.

---

Recommended Security Actions

Priority: Low

• Firewall Rules: Not required (no services exposed)
• Block Recommendations: None
• Monitoring Level: Standard passive monitoring
• Threat Intelligence: No additional indicators to track

Note: IP exhibits benign characteristics consistent with infrastructure or residential use. No immediate blocking required.

---

Intelligence Confidence

Data sufficiency: 0.67 (67% coverage across 6 dimensions)

Confidence Score: 0.17 (low-medium confidence based on limited probe data)

Signal Count: 5 of 6 dimensions covered

---

Analyst Notes: This IP demonstrates characteristics of a firewalled or inactive endpoint. The minimal risk score (25) combined with zero blacklist entries, no open ports, and stable geolocation suggests legitimate infrastructure use. Continue standard monitoring without escalation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.