111.92.48.226📋 Copy

## IP Intelligence Briefing: 111.92.48.226/32

Classification: Low Risk | Risk Score: 15 | Status: Legitimate ISP Infrastructure

---

Ownership and Geolocation

The IP address 111.92.48.226 is assigned to IRT-ASIANET-IN (ASIANET), operating under ASN 17465 within APNIC RIR. The address is allocated in CIDR block 111.92.0.0/17. Geolocation inference places the endpoint in Thiruvananthapuram, Kerala, India.

Network Role and Services

The IP is classified as "Firewalled / No Services." No open ports, TLS certificates, or HTTP services were detected. DNS PTR record resolves to 111092dynamic048226.asianet.co.in, indicating a dynamic residential or consumer ISP address. Forward DNS resolution is unconfirmed, consistent with residential ISP addressing patterns.

Threat Assessment

No malicious indicators identified:

• Known attacker: No
• Tor exit node: No
• Spam source: No
• Blacklist count: 0
• Known campaigns: None
• Abuse confidence score: Not applicable
• DNSBL listings: 1 out of 8 total lists

Control plane analysis shows operator score of 0.1304 (labeled "Minimal") with route instability detected (routeChanges30d: 0, isRouteStable: false).

Historical Observations

Analysis of 18 observations indicates:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 0
• Persistently malicious: No
• Recent signals (2026-07-30) confirm organization assignment (confidence: 0.90) and geographic attribution to India (confidence: 0.52)
• No campaign, certificate, or banner matches observed

Network Neighborhood

The /24 subnet (111.92.48.0/24) shows:

• Abuse density: 0
• Total siblings: 1
• Threat siblings: 0
• Risk distribution: High: 0, Medium: 0, Low: 1

One neighboring IP (111.92.48.252) identified with risk score 15 and authority score 50. No inherited risk from subnet context.

Related Entities

• Network: ASIANET (multiple relationships)
• Hostnames: 111092dynamic048226.asianet.co.in (DNS associations)

---

Analysis Summary

IP 111.92.48.226 represents legitimate ASIANET ISP infrastructure with no observed malicious activity. The low risk score (15), zero abuse indicators, and dynamic residential hostname pattern are consistent with consumer-grade ISP addressing. Historical data confirms stable ownership with no malicious behavioral patterns. The single neighbor in the subnet also presents low risk. No security action recommended at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.