120.89.104.178📋 Copy

# IP Intelligence Briefing: 120.89.104.178

Classification: Moderate Risk / Residential Endpoint

Report Date: [Current Date]

Target IP: 120.89.104.178/32

---

## Executive Summary

IP 120.89.104.178 is a residential endpoint located in Kathmandu, Nepal, operating under the NTCINTERNET network infrastructure. The IP exhibits a moderate risk profile (score: 40) with no active threat indicators. The address resolves to a DSL connection type and is classified as a residential infrastructure endpoint.

---

## Network Profile

Ownership & Registration:

• Organization: IRT-NPTELECOM-NP (NTCINTERNET)
• ASN: 23752
• CIDR Block: 120.89.96.0/19
• RIR: APNIC
• Abuse Contact: abuse_mail@ntc.net.np

Geolocation:

• Country: Nepal (NP)
• City: Kathmandu
• Region: P3
• Coordinates: 27.71°N, 85.31°E

Network Role:

• Infrastructure Type: Residential
• Connection Type: DSL
• Is Cloud/Proxy/VPN: No
• Is Tor Exit: No

---

## Threat Assessment

Risk Indicators:

• Risk Score: 40 (Moderate)
• Provider Score: 0
• Authority Score: 0
• Blacklist Count: 0
• Known Campaigns: None detected
• Abuse Confidence Score: Not calculated

Service Analysis:

• Open Ports: None detected
• HTTP Services: None active
• TLS Certificates: None
• DNS Records: Single PTR record (178-adsl.ntc.net.np)

Control Plane Status:

• Route Stability: Unstable (isRouteStable: false)
• BGP Prefix: 120.89.104.0/24
• DNSBL Listings: 2 of 8 total lists
• Operator Score: 0.1304 (Minimal)

---

## Observed Threat History

Fifteen signal observations collected, with the most recent data from 2026-07-25. Key findings:

• Consistent residential classification across all observations
• No ownership changes detected
• No persistent malicious activity observed
• Threat observation count: 0
• Is Persistently Malicious: False

The IP has maintained a stable residential profile without evidence of malicious behavior escalation.

---

## Network Relationships

Identified Associations:

• Network: NTCINTERNET (2 associations)
• DNS Hostname: 178-adsl.ntc.net.np (2 associations)

No external entity links or certificate associations detected. The IP operates in isolation within its network segment.

---

## Subnet Neighborhood Analysis

Subnet: 120.89.104.178/24

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 2
• Low Risk: 1
• Abuse Density: 0

Adjacent IPs:

The subnet demonstrates moderate overall risk with three neighboring addresses, none showing high-risk characteristics.

---

## Recommended Security Actions

Current Status: No immediate blocking required. The IP presents as a legitimate residential endpoint with no active threat indicators.

Monitoring Recommendations:

• Monitor for any changes in risk score or threat indicators
• Track subnet-level activity for emerging patterns
• No firewall rules currently recommended based on risk profile

---

## Conclusion

IP 120.89.104.178 is a legitimate residential endpoint in Nepal with moderate risk characteristics. The absence of threat indicators, combined with consistent residential classification and stable network behavior, suggests benign activity. SOC analysts should maintain monitoring but no immediate blocking or escalation actions are warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.