113.199.246.113
# THREAT INTELLIGENCE BRIEFING
IP Address: 113.199.246.113/32
Classification: Residential ISP Allocation
Risk Level: LOW
Generated: [Current Date]
---
## EXECUTIVE SUMMARY
IP 113.199.246.113 is a residential infrastructure endpoint assigned to Nepal Telecommunications Corporation (NTC), operating under ASN AS23752. The address demonstrates a benign risk profile with no active threat indicators, blacklisting, or malicious behavior observed. No security actions or firewall rules are recommended at this time.
---
## PROFILE DETAILS
| Attribute | Value |
|---|---|
| **Risk Score** | 0.0 (Low Risk) |
| **Country** | Nepal (NP) |
| **City** | Janakpur Dham |
| **Region** | P2 |
| **Organization** | IRT-NPTELECOM-NP |
| **ASN** | AS23752 (Nepal Telecommunications Corporation) |
| **CIDR Block** | 113.199.246.0/23 |
| **Service Classification** | Firewalled / No Services |
| **Open Ports** | None detected |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Blacklist Status** | Not listed (0 entries) |
| **Infrastructure Type** | Residential |
---
## OBSERVATION HISTORY
The IP has been monitored with 11 observation signals as of July 2026. Key observations include:
- Geolocation Consensus: Multiple sources confirm Nepal (NP) origin with coordinates 26.7°N, 85.91°E
- ISP Classification: Registered under APNIC with abuse contact abuse_mail@ntc.net.np
- Network Classification: Residential infrastructure, not cloud, CDN, VPN, or hosting
- Threat Status: No persistent malicious activity detected
---
## NETWORK CONTEXT
Subnet Analysis (113.199.246.0/24)
- Abuse Density: 0.0 (Low)
- Total Siblings: 4
- Active Siblings: 0
- Threat Siblings: 0
Notable Neighbor
IP 113.199.246.204 shows elevated metrics:
- Risk Score: 15
- Authority Score: 50
---
## RELATIONSHIP GRAPH
No related entities detected (0 relationships). The IP exists in isolation with no links to:
- Associated hostnames
- Related organizations
- Shared certificates
- Correlated IP addresses
---
## SECURITY RECOMMENDATIONS
Current Status: No action required
The IP address presents a normal residential ISP allocation with no malicious indicators. Standard monitoring practices apply:
- Permit inbound/outbound traffic per organizational policy
- No blocking or rate-limiting recommended
- No firewall rule changes warranted
Recommended Actions:
- Monitor for any future behavior changes
- Maintain standard residential IP handling procedures
- No escalation or incident response required
---
## CONFIDENCE METRICS
| Metric | Value |
|---|---|
| Overall Confidence | 0.125 |
| Data Sufficiency | Limited |
| GeoPlausible | False |
| Threat Persistence | 0 days |
| Threat Observations | 0 |
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-NPTELECOM-NP |
| ASN | AS23752 |
| Network Name | NTCINTERNET |
| CIDR Block | 113.199.224.0/19 |
| RIR | APNIC |
| Country | NP |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Residential |
| Service Purpose | Residential Endpoint |
| Network Tier | End-User — Residential ISP endpoint |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS23752 |
| Network Prefix | 113.199.246.0/23 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 11:15:34 UTC |
| Last Seen | 2026-08-22 14:22:45 UTC |
| Profile Built | 2026-08-29 10:40:26 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 113.199.246.113
Who owns the IP address 113.199.246.113?
113.199.246.113 is registered to IRT-NPTELECOM-NP. The address falls within the 113.199.224.0/19 network block. Registration is held at APNIC.
Where is 113.199.246.113 located?
Geolocation data places 113.199.246.113 in Butwal, Lumbini Province, NP. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 113.199.246.113 malicious or safe?
113.199.246.113 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 113.199.246.113 a VPN, proxy, or data center address?
113.199.246.113 is classified as a residential network based on network ownership and behavioural analysis.