# IPDEBRIEF INTELLIGENCE BRIEFING
Target: 207.175.31.91/32
Classification: Google Cloud Infrastructure
Risk Assessment: LOW RISK
Date: Current Analysis
---
## EXECUTIVE SUMMARY
IP 207.175.31.91 is a Google Cloud Compute infrastructure address with a low risk profile (Risk Score: 25/100). The IP is classified as cloud compute infrastructure with no observed threat indicators, zero blacklist entries, and no active malicious campaigns. The address belongs to Google LLC (ASN: 396982) and is part of the GOOGL-2 network block (207.175.0.0/16). Geolocation data indicates the address is associated with St. Ghislain, Wallonia, Belgium.
---
## INFRASTRUCTURE PROFILE
| Attribute | Value |
|---|---|
| **Organization** | Google LLC |
| **ASN** | 396982 |
| **Network** | GOOGL-2 |
| **CIDR Block** | 207.175.0.0/16 |
| **RIR** | ARIN |
| **Infrastructure Type** | Cloud Compute |
| **Geolocation** | St. Ghislain, BE (50.45°N, 3.82°E) |
| **Timezone** | Europe/Brussels |
---
## NETWORK CHARACTERISTICS
- Classification: Cloud Infrastructure / Hosting
- DNS Records: Forward confirmed (91.31.175.207.bc.googleusercontent.com)
- PTR Hostname: 91.31.175.207.bc.googleusercontent.com
- Open Ports: None detected
- Services: Firewalled / No Services Exposed
- TLS Certificate: Not present
- HTTP Banner: None detected
---
## THREAT INDICATORS
| Indicator | Status |
|---|---|
| **Risk Score** | 25 (Low Risk) |
| **Blacklist Count** | 0 |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Known Campaigns** | None |
| **DNSBL Listed** | 1 of 8 lists |
| **Abuse Confidence Score** | Not reported |
---
## NEIGHBORHOOD ANALYSIS
Subnet: 207.175.31.91/24
- Abuse Density: 0%
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 0
No neighboring IPs within the /24 subnet show malicious activity. The subnet demonstrates clean classification with no inherited risk signals.
---
## OBSERVATION HISTORY
Total Observations: 17 signals
Most Recent: 2026-07-30
Key temporal indicators:
- Classification consistently "clean" across all observations
- Abuse density maintained at 0
- Inherited risk: 0
- No threat persistence observed
- Not persistently malicious
---
## RELATIONSHIP ANALYSIS
The IP maintains the following associations:
- DNS Association: 91.31.175.207.bc.googleusercontent.com
- Network Association: GOOGL-2 (repeated multiple times)
---
## CONTROL PLANE DATA
- Origin ASN: 396982
- BGP Prefix: 207.175.0.0/17
- Route Stability: Not stable (isRouteStable: false)
- DNSSEC: Valid
- CAA Records: Present
- Operator Score: 0.3478 (Basic)
- Delegation Age: Not reported
---
## SECURITY RECOMMENDATIONS
Risk Score: 25/100 โ LOW RISK
No specific firewall rules or blocking actions are recommended at this time. The IP address demonstrates:
- Standard Google Cloud infrastructure characteristics
- No evidence of abuse or malicious activity
- Clean neighborhood classification
- No threat indicators in historical data
Monitoring Recommendation: Continue standard monitoring. No immediate action required.
---
## INTELLIGENCE CONCLUSION
This IP address represents legitimate Google Cloud infrastructure with a low-risk profile. The address shows no indicators of malicious activity, has no blacklist entries, and is classified as clean within its neighborhood. SOC analysts may treat this as a trusted infrastructure source requiring only standard traffic logging and monitoring practices.
Priority: LOW
Action Required: None
Recommended Monitoring: Standard traffic analysis
---
*Report generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 207.175.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 91.31.175.207.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 91.31.175.207.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 33% | 2 | 4 |
| reputation | 30% | 1 | 3 |
| geolocation | 13% | 1 | 1 |
| Overall | 23% | 9 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-27 21:54:23 UTC |
| Last Seen | 2026-08-12 21:56:23 UTC |
| Profile Built | 2026-08-12 22:11:06 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
Full dossier details are available via our API.