31.187.138.87📋 Copy

IP Intelligence Briefing: 31.187.138.87

Date: 2026-06-18

---

**Core Profile**

• Risk Score: 25 (Low Risk)
• Provider: ASN 50266 ("Access & transport")
• Geolocation: Netherlands (NL), Utrecht, IJsselstein (52.13°N, 5.29°E)
• Network Role: Firewalled / No Services (no open ports, no TLS/http detected)
• DNS: PTR hostname `87-138-187-31.ftth.glasoperator.nl` resolved to `glasoperator.nl`
• Threat Indicators: No malicious activity, no blacklists, no known campaigns

---

**Network & Control Plane**

• BGP: Prefix `31.187.128.0/17`, origin ASN 50266
• Route Stability: Unstable (route changes in last 30 days, ICMP validation blocked)
• DNSSEC: Validated
• Subnet: `31.187.138.87/24` (abuse density: 0, no active neighbors detected)

---

**Observation History**

• Recent Signals (last 30 days):

- Minimal risk (confidence: 30%)

- DNSSEC validation (confidence: 60%)

- Traceroute failure (ICMP blocked, distance ~118km inferred)

• No persistent threats detected; historical observations show low activity.

---

**Relationships**

• DNS Associations: Linked to `glasoperator.nl` (PTR hostname)
• Network: Same subnet (`NL-ODIDO-20110325`)
• No correlated malicious IPs or campaigns

---

**Neighbor Analysis**

• Subnet (`31.187.138.87/24`):

- 0 active IPs detected

- Abuse density: 0 (clean)

- No risky neighbors identified

---

**SOC Actionable Insights**

• Low risk IP with no active threats; likely residential or enterprise infrastructure.
• Monitor DNS for `glasoperator.nl` for potential lateral movement.
• Investigate BGP instability if network connectivity issues arise.
• No immediate mitigation required, but continuous monitoring recommended.

Conclusion: 31.187.138.87 is a low-risk IP with no malicious indicators. Focus on validating DNS and BGP configurations for potential operational security gaps.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.