173.194.31.42
IP Intelligence Briefing: 173.194.31.42
Overview
The IP address 173.194.31.42 was identified as a Low Risk asset with a reputation score of 25. It was attributed to Google LLC (ASN 15169) within the 173.194.0.0/16 CIDR block. The infrastructure functioned as a CloudCompute Web Server with a network role classification of Hosting.
Technical Profile
Network scanning detected active TCP ports 80 (HTTP) and 443 (HTTPS). The server banner returned "gvs 1.0." TLS analysis revealed a certificate issued by Google Trust Services covering *.c.docs.google.com and associated subdomains. DNS records resolved to lga25s87-in-f10.1e100.net under the 1e100.net domain.
Threat Assessment
The address was not classified as a known attacker or spam source. No specific threat indicators or known campaigns were observed. While the blacklist count was zero, the IP appeared on one of eight DNSBL lists. Behavioral analysis showed no active attacks, enumeration strikes, or honeypot hits.
Observations and Contradictions
Geolocation data indicated New York, US, but control plane physics measurements flagged an RTT contradiction (Claimed geolocation contradicts RTT physics measurement). The control plane showed minimal operator scores and route stability was marked as false, though 30-day route changes remained zero.
Recommendation
Due to signal contradictions present in the control plane data and the low risk profile, the recommended action was to Monitor the asset for changes. No immediate firewall rules were required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS15169 |
| Network Name | |
| CIDR Block | 173.194.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | lga25s87-in-f10.1e100.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | lga25s87-in-f10.1e100.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 16/16 domains |
| DMARC | 16/16 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 16 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | gvs 1.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.c.docs.google.com*.a1.googlevideo.com*.bdn.dev*.origin-test.bdn.dev*.c.2mdn.net*.c.bigcache.googleapis.com*.c.chat.google.com*.c.doc-0-0-sj.sj.googleusercontent.com*.c.drive.google.com*.c.googlesyndication.com |
| Valid From | 2026-08-25T12:31:58+00:00 |
| Valid Until | 2026-11-03T12:31:57+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 69 days |
| Serial Number | 6BAECB26EF040D521266DCC639DF0435 |
| Thumbprint | 4B229DCF11652175540DF2870F24F0C94018BAC2 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 33% | 2 | 4 |
| reputation | 32% | 1 | 5 |
| geolocation | 42% | 2 | 6 |
| Overall | 32% | 10 | 26 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 20:18:25 UTC |
| Last Seen | 2026-09-17 01:31:34 UTC |
| Profile Built | 2026-09-17 01:40:05 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 57 |
Full dossier details are available via our API.