113.199.230.126📋 Copy

# IP Intelligence Briefing: 113.199.230.126/32

Classification: Low Risk – Residential Endpoint

Date: 2026-07-23

Analyst: Automated Intelligence System

---

## Executive Summary

IP address 113.199.230.126 is a residential endpoint located in Kathmandu, Nepal, operated by Nepal Telecommunications Corporation (IRT-NPTELECOM-NP, ASN 23752). The IP presents low overall risk (score 15/100) with no active threat indicators detected. One DNSBL listing was identified across 8 total lists, suggesting minimal reputation concerns. The IP should be monitored but does not warrant immediate blocking.

---

## Technical Profile

Ownership & Network:

• Organization: IRT-NPTELECOM-NP
• Network: NTCINTERNET (113.199.224.0/19)
• ASN: 23752
• RIR: APNIC

Geolocation:

• Country: Nepal (NP)
• City: Kathmandu
• Coordinates: 27.71°N, 85.31°E
• Accuracy: Consensus confirmed

Network Classification:

• Infrastructure Type: Residential
• Connection Type: Endpoint
• Not identified as: CDN, Cloud, VPN, Proxy, Tor, Hosting, or Mobile infrastructure

---

## Threat Intelligence Assessment

Current Risk Indicators:

• Overall Risk Score: 15 (Low)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence Score: Not calculated
• Blacklist Count: 0 (active)
• DNSBL Listed: 1 of 8 total lists

Threat Indicators:

• No known attacker reputation
• No spam source indicators
• No Tor exit node activity
• No known campaigns associated
• No active threat feeds flagged

Behavioral Observations:

• 12 signal observations recorded
• No persistent malicious activity detected
• No honeypot hits or enumeration strikes
• No WAF violations recorded
• Total incidents: 0

---

## Historical Analysis

The IP has 12 recorded observations as of 2026-07-23. Recent signals indicate:

• Stable ownership with no changes
• Residential classification maintained
• Geolocation signals consistent (Nepal/Kathmandu)
• One threat pulse detected (source: AlienVault OTX)
• No escalation in risk profile over observation period

---

## Network Relationships

Connected Entities:

• 2 relationships identified (Same Network: NTCINTERNET)
• No external organizational or certificate relationships
• No known peer IP addresses outside the /24 subnet

---

## Neighborhood Analysis

Subnet: 113.199.230.126/24

• Neighbor Count: 1 (113.199.230.147)
• Abuse Density: 0
• Risk Distribution: No high/medium risk neighbors detected
• Overall Subnet Classification: Low risk

---

## Recommended Actions

Immediate:

• Monitor for changes in reputation score
• Maintain logging but no blocking required

Defensive Configuration:

• No specific firewall rules required at this time
• Standard residential endpoint handling applies
• Consider rate limiting if unusual traffic patterns emerge

Long-term:

• Include in watchlist if threat indicators increase
• Monitor DNSBL status weekly
• Re-evaluate after 30 days if no changes observed

---

Conclusion: IP 113.199.230.126 represents a standard residential endpoint from Nepal with minimal threat indicators. No immediate action required. Continue standard monitoring practices and observe for any changes in reputation or threat activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.