106.192.56.97
# IP INTELLIGENCE BRIEFING
Target: 106.192.56.97/32
Classification: Moderate Risk | Report Date: 2026-07-17
---
## EXECUTIVE SUMMARY
IP 106.192.56.97 presents a moderate risk profile (Score: 40) with no active threat indicators. The address is associated with Bharti Airtel mobile network infrastructure and currently exhibits minimal abuse activity. Geolocation data shows inconsistencies between India and US reporting, warranting verification.
---
## OWNERSHIP AND INFRASTRUCTURE
| Attribute | Value |
|---|---|
| **ASN** | 45609 |
| **Organization** | IRT-BHARTI-MO-IN |
| **Network Name** | Manaser |
| **CIDR Block** | 106.192.56.0/21 |
| **RIR** | APNIC |
| **Mobile Carrier** | Airtel (Bharti Airtel Ltd.) |
| **Technology** | LTE/5G (MCC: 404, MNC: 10) |
| **Network Classification** | Mobile Network |
The IP belongs to Bharti Airtel's mobile infrastructure, operating under the Manaser network prefix. Control plane data indicates BGP prefix 106.192.56.0/22 with route stability flagged as false.
---
## GEOLOCATION ANALYSIS
Primary Report: India (Mumbai, Maharashtra)
Secondary Report: US (Boston, MA)
GeoConsensus: False
GeoPlausible: False
Geolocation data shows significant inconsistency with conflicting reports between India and United States. This discrepancy is typical for mobile IP addresses due to carrier-grade NAT and roaming configurations. Both sources maintain confidence scores above 0.70.
---
## THREAT INDICATOR SUMMARY
| Indicator | Status |
|---|---|
| **Risk Score** | 40 (Moderate) |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Blacklist Count** | 0 |
| **DNSBL Listed** | 2 of 8 total lists |
| **Known Campaigns** | None |
The IP shows no active threat indicators. While listed on 2 out of 8 DNSBLs, these listings lack known campaign associations.
---
## NETWORK STATE AND SERVICES
| Attribute | Finding |
|---|---|
| **Open Ports** | None detected |
| **HTTP Services** | None |
| **TLS Certificates** | None |
| **DNS PTR Record** | Not resolved |
| **Forward Resolution** | None |
| **Hosted Domains** | 0 |
The IP is currently in a firewalled state with no active services. Network role classification confirms mobile infrastructure with no public-facing services.
---
## OBSERVATION HISTORY
Total Observations: 12
Recent Activity: July 2026
Recent signal observations show:
- Consistent ASN identification from team-cymru-dns
- DNSSEC validation passing
- Geolocation signals persisting from Mumbai, India
- No ownership changes detected
The temporal data indicates stable ownership with zero threat persistence days and no persistent malicious activity detected.
---
## NEIGHBORHOOD ANALYSIS
Subnet: 106.192.56.97/24
Abuse Density: 0%
Total Siblings: 0
Active Siblings: 0
Threat Siblings: 0
No neighboring IPs detected in the /24 subnet, indicating this address may be dynamically assigned or the subnet contains minimal active hosts.
---
## RELATIONSHIP GRAPH
| Relationship Type | Target |
|---|---|
| Same Network | Manaser |
| Same Network | Manaser |
Relationship data confirms network-level associations with the Manaser infrastructure, with no external entity links.
---
## RECOMMENDED ACTIONS
1. Monitor for Service Activation: With current firewalled state, monitor for open port emergence
2. Verify Geolocation: Address conflicting India/US reports through carrier-specific geolocation sources
3. DNSBL Monitoring: Track changes in the 2 DNSBL listings
4. Baseline for Mobile Traffic: Establish baseline behavior for mobile carrier IP range
---
## INTELLIGENCE CONCLUSION
IP 106.192.56.97 represents standard mobile infrastructure activity with moderate risk due to carrier-grade mobile network classification. The geolocation inconsistency should be noted but is expected behavior for mobile IPs. No immediate threat action required; maintain monitoring for service activation or blacklist escalations.
Risk Level: MODERATE
Recommended Handling: Monitor | No immediate blocking required
---
*Report generated from IPDebrief intelligence platform data. All findings based on observed signal data and network registry information.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | IRT-BHARTI-MO-IN |
| ASN | AS45609 |
| Network Name | Manaser |
| CIDR Block | 106.192.56.0/21 |
| RIR | APNIC |
| Country | IN |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS45609 |
| Network Prefix | 106.192.56.0/22 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 4% | 1 | 2 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-07 13:56:38 UTC |
| Last Seen | 2026-07-17 21:51:19 UTC |
| Profile Built | 2026-08-29 07:33:09 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 106.192.56.97
Who owns the IP address 106.192.56.97?
106.192.56.97 is registered to IRT-BHARTI-MO-IN. The address falls within the 106.192.56.0/21 network block. Registration is held at APNIC.
Where is 106.192.56.97 located?
Geolocation data places 106.192.56.97 in Mumbai, Maharashtra, India. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 106.192.56.97 malicious or safe?
106.192.56.97 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
Is 106.192.56.97 a VPN, proxy, or data center address?
106.192.56.97 is classified as a mobile network based on network ownership and behavioural analysis.