49.244.110.154📋 Copy

# IP Intelligence Briefing: 49.244.110.154/32

Classification: LOW RISK | Status: Monitored | Last Updated: 2026-07-30

---

## Executive Summary

IP 49.244.110.154 is a residential Fiber To The Home (FTTH) address located in Bhojpur, Koshi region, Nepal. The IP presents a low risk profile (risk score: 25) with no active threat indicators detected. This address is assigned to Nepal Telecom (NTC), a legitimate ISP operator.

---

## Technical Profile

Geolocation:

• Country: Nepal (NP)
• Region: Koshi
• City: Bhojpur
• Coordinates: 27.16°N, 87.05°E
• Geolocation Consensus: Confirmed across multiple sources

Network Attribution:

• ASN: 23752
• BGP Prefix: 49.244.96.0/20
• RIR: APNIC
• Organization: IRT-NPTELECOM-NP (Nepal Telecom)
• Abuse Contact: abuse_mail@ntc.net.np
• CIDR Block: 49.244.0.16/28

DNS Resolution:

• PTR Hostname: 154-ftth.ntc.net.np
• Forward Resolution: 154-ftth.ntc.net.np
• Hosted Domains: None
• DNSSEC: Valid
• Blacklist Status: Listed on 1 of 8 DNSBLs (minimal impact)

---

## Threat Assessment

Current Risk Score: 25/100 (Low)

Threat Indicators:

• No active threat feeds or campaigns detected
• Not a Tor exit node
• Not classified as a known attacker
• Not a spam source
• Zero open ports or active services detected
• No TLS certificates or HTTP services exposed
• No WAF violations or honeypot hits

Network Classification:

• Infrastructure Type: Residential FTTH
• Connection Type: Residential
• Not a proxy, CDN, VPN, or hosting service

---

## Behavioral History

Observation Count: 13 signals (most recent: 2026-07-30)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No
• Recent activity indicates stable ownership and no escalation in threat posture

Risk Trend: Stable. No significant changes in geolocation, ownership, or threat indicators observed over the observation period.

---

## Neighborhood Analysis

Subnet: 49.244.110.154/24

Abuse Density: 0 (No abuse activity detected in neighborhood)

Sibling Analysis:

• Total Neighbors: 0
• Active Siblings: 0
• Threat Siblings: 0
• High/Medium Risk IPs: 0

The IP exists in a low-density subnet with no adjacent addresses flagged for abuse.

---

## Relationships

DNS Associations:

• Primary Hostname: 154-ftth.ntc.net.np (2 associations recorded)

No additional relationships to organizations, certificates, or related subnets identified.

---

## Recommended Actions

SOC Analyst Guidance:

1. No immediate blocking required. The IP presents low risk and appears to be legitimate residential infrastructure.

2. Monitor for service exposure. Currently no ports are open, but standard monitoring should continue.

3. Verify blacklist status. The IP is listed on 1 of 8 DNSBLs—investigate the specific listing if traffic from this IP triggers reputation-based filtering.

4. Allow legitimate traffic. This is a Nepal Telecom FTTH address; block only if specific malicious activity is observed.

5. Update firewall rules: No specific iptables/nftables rules recommended at this time.

---

## Conclusion

IP 49.244.110.154 is a benign residential address assigned to Nepal Telecom. No threat indicators support blocking or enhanced monitoring beyond standard baseline operations. The IP's stable history, low-risk profile, and lack of active services indicate normal residential usage.

Recommendation: Monitor as normal traffic; no action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.