203.147.139.137
# IPDEBRIEF INTELLIGENCE BRIEFING
Target IP: 203.147.139.137/32
Report Date: 2026-07-24
Classification: LOW RISK
Risk Score: 25/100
---
## EXECUTIVE SUMMARY
The IP address 203.147.139.137 is classified as a low-risk endpoint with minimal threat indicators. The IP belongs to IRT-MEKONGNET-KH (ASN 38235) within the 203.147.139.0/24 subnet. No active threat campaigns, malware distribution, or attack signatures were observed. The subnet exhibits low abuse density with no high-risk neighbors.
---
## OWNERSHIP & NETWORK ATTRIBUTES
| Attribute | Value |
|---|---|
| **Organization** | IRT-MEKONGNET-KH |
| **Network Name** | MEKONGNET-KH |
| **ASN** | 38235 |
| **CIDR Block** | 203.147.139.0/24 |
| **RIR** | APNIC |
| **Abuse Contact** | Available via RDAP |
| **Network Role** | Firewalled / No Services |
| **Classification** | Not hosting, CDN, VPN, proxy, or Tor |
---
## GEOLOCATION DATA
Primary Location: US-CO, Denver
Geographic Discrepancy: Geolocation signals show conflicting data—some sources indicate Phnom Penh, KH (Cambodia). This inconsistency warrants monitoring but does not indicate malicious activity.
Coordinates: 39.7392° N, 104.9903° W (Denver, CO)
Timezone: America/Denver
GeoSource Count: 2
GeoConsensus: False
---
## THREAT INDICATORS
| Indicator | Status |
|---|---|
| **Abuse Confidence Score** | N/A |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Tor Exit Node** | No |
| **Blacklist Count** | 0 |
| **Threat Campaigns** | None detected |
| **Threat Feeds** | Empty |
Behavioral Analysis:
- Zero enumeration strikes
- Zero WAF violations
- Zero honeypot hits
- No total incidents recorded
- Not persistently malicious
---
## NETWORK SERVICES & DNS
| Service | Status |
|---|---|
| **Open Ports** | None detected |
| **TLS Certificate** | None |
| **HTTP Banner** | None |
| **PTR Records** | None |
| **Forward Resolution** | Failed |
| **Hosted Domains** | 0 |
| **Email Auth (SPF/DMARC)** | Not configured |
DNSBL Status: Listed on 1 of 8 monitored lists
---
## CONTROL PLANE ANALYSIS
| Metric | Value |
|---|---|
| **Origin ASN** | 38235 |
| **BGP Prefix** | 203.147.139.0/24 |
| **RPKI State** | N/A |
| **IRR Consistency** | N/A |
| **Route Stability** | Unstable |
| **Route Changes (30d)** | 0 |
| **MoAS** | No |
| **DNSSEC Valid** | Yes |
| **Operator Score** | 0.1304 (Minimal) |
| **Trace Hops** | 30 |
| **Transit Network** | Comcast |
---
## SUBNET NEIGHBORHOOD ANALYSIS
Subnet: 203.147.139.0/24
Total Siblings: 7
Abuse Density: 0
High-Risk Neighbors: 0
Medium-Risk Neighbors: 0
Low-Risk Neighbors: 7
Neighbor Risk Distribution:
| IP Address | Risk Score | Authority Score |
|---|---|---|
| 203.147.139.19 | 0 | 50 |
| 203.147.139.33 | 25 | 50 |
| 203.147.139.74 | 25 | 50 |
| 203.147.139.116 | 25 | 50 |
| 203.147.139.161 | 0 | 50 |
| 203.147.139.165 | 25 | 50 |
| 203.147.139.244 | 0 | 50 |
---
## OBSERVATION HISTORY
Total Observations: 13
Observation Period: 2026-07-24 (single day snapshot)
Signal Timeline:
- 09:56:59 UTC: Geolocation signal (Phnom Penh, KH) — Confidence: 0.70
- 09:57:48 UTC: Operator score signal (Minimal) — Confidence: 0.30
- 09:57:48 UTC: Multi-dimension signal (5/6 dimensions covered) — Confidence: 0.21
- 10:02:04 UTC: Ownership stability signal — Confidence: 0.85
- 10:02:40 UTC: Network role signal (firewalled) — Confidence: 0.30
Temporal Indicators:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: No
---
## RELATIONSHIP GRAPH
Total Relationships: 2
| Relationship Type | Target | Type |
|---|---|---|
| Same Network | MEKONGNET-KH | Network |
| Same Network | MEKONGNET-KH | Network |
---
## SOC RECOMMENDATIONS
Immediate Actions:
1. No blocking recommended — Risk score of 25 indicates low threat level
2. Monitor geolocation discrepancies — Investigate US vs. KH location signals
3. DNSBL monitoring — Review reason for single DNSBL listing
Long-term Monitoring:
1. Watch for route stability changes in BGP prefix 203.147.139.0/24
2. Monitor for emergence of new threat indicators
3. Track geolocation signal consistency
Threat Intelligence Classification: LOW RISK
Confidence Level: MODERATE (based on limited observation window)
Recommended Action: Passive monitoring; no immediate mitigation required
---
Generated by: IPDebrief Threat Intelligence Platform
Data Sources: RDAP, BGP routing tables, DNS, threat feeds, geolocation providers
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-MEKONGNET-KH |
| ASN | AS38235 |
| Network Name | MEKONGNET-KH |
| CIDR Block | 203.147.139.0/24 |
| RIR | APNIC |
| Country | KH |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS38235 |
| Network Prefix | 203.147.139.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 6 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-07 06:27:43 UTC |
| Last Seen | 2026-08-30 12:04:54 UTC |
| Profile Built | 2026-08-29 06:27:29 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 18 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 203.147.139.137
Who owns the IP address 203.147.139.137?
203.147.139.137 is registered to IRT-MEKONGNET-KH. The address falls within the 203.147.139.0/24 network block. Registration is held at APNIC.
Where is 203.147.139.137 located?
Geolocation data places 203.147.139.137 in Denver, US-CO, United States. The local time zone is America/Denver. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 203.147.139.137 malicious or safe?
203.147.139.137 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.