106.192.37.231📋 Copy

# IP Intelligence Briefing: 106.192.37.231/32

## Executive Summary

IP 106.192.37.231 is a low-risk residential mobile endpoint in India, classified as Airtel LTE/5G traffic. The IP shows no active threat indicators, no open services, and no known malicious activity. The subnet exhibits zero abuse density with no neighboring threats.

## Technical Profile

Risk Assessment:

• Overall Risk Score: 15 (Low Risk)
• Reputation: Low Risk
• Provider/Authority Scores: 0 (No provider/authority attribution)
• Stability Score: 0

Network Ownership:

• ASN: 45609
• Organization: IRT-BHARTI-MO-IN (Bharti Airtel)
• Network Name: MOHALI-UN
• CIDR Block: 106.192.32.0/20
• RIR: APNIC (Asia-Pacific)
• Abuse Contact: ip.misuse@airtel.com

Geolocation:

• Country: India (IN)
• Region: Telangana
• City: Hyderabad
• Geo Confidence: Plausible (multiple sources, consensus inconsistent)
• Geolocation Distance: 7258.9 km from reference point (validation pending ICMP)

Network Role Classification:

• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None
• Connection Type: Mobile (LTE/5G via Airtel carrier)
• Carrier: Bharti Airtel Ltd. (MCC: 404, MNC: 10)

## Threat Intelligence

Active Threat Indicators:

• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None
• Threat Feeds: None
• Pulsedive Risk: Not available

DNSBL Status:

• Listed: 1 of 8 total lists
• Operator Score: 0.1304 (Minimal)

Control Plane:

• Origin ASN: 45609
• BGP Prefix: 106.192.36.0/22
• Route Stability: False
• RPKI State: Not validated
• IRR Consistency: Not available
• Route Changes (30d): 0

## Historical Observations

Signal Count: 13 observations recorded

Key Historical Events:

• 2026-07-26T15:05:11: ASN/org signals confirmed (IRT-BHARTI-MO-IN, APNIC, CIDR 106.192.32.0/20)
• 2026-07-26T15:05:03: Geolocation signals showing India (Gurgaon, Telangana) with 95% confidence
• 2026-07-26T15:04:01: ICMP validation blocked (unable to validate geolocation)
• 2026-07-26T15:05:11: Hop IP 62.115.138.71 geolocated to Atlanta, US-GA (likely misattribution)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

## Neighborhood Analysis

Subnet: 106.192.37.231/24

• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0
• High/Medium/Low Risk Distribution: 0/0/0

Conclusion: The subnet is clean with no associated threats. No neighboring IPs identified.

## Relationships

• Same Network: MOHALI-UN (1 relationship)

## Recommended Actions

Firewall Rules:

• No specific blocking rules recommended
• IP classified as low-risk residential mobile endpoint
• Standard residential IP handling applies

SOC Analyst Notes:

1. This is a legitimate residential mobile IP address on the Airtel network

2. No active threat indicators or malicious activity detected

3. Geolocation discrepancies observed (US hop vs India destination) — common in mobile routing

4. ICMP validation failures are normal for mobile endpoints

5. Monitor for service changes if previously inactive

Risk Rating: LOW — No immediate action required. Standard residential mobile traffic.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.