IPDebrief

31.42.125.152

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

The IP address 31.42.125.152 was assessed as Low Risk with a risk score of 25. It was assigned to ASN 152565 (IPBNB Abuse Contact) under the CLOUDONFIRE netname within the 31.42.125.0/24 block. Geolocation data placed the host in India. Technical analysis revealed no open ports or active services, with the service purpose categorized as Firewalled / No Services. DNS records showed a PTR host of static152.infra02.rdns.cloudonfire.com, though forward resolution remained unconfirmed. Threat intelligence feeds returned no indicators, with zero blacklist entries and no association with known campaigns or spam sources. The endpoint was not identified as a Tor exit, proxy, or hosting infrastructure. No specific actions were recommended based on the available evidence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇮🇳 India
Region—
CityHong Kong
Timezone—
Latitude—
Longitude—

🏢 Ownership & Registration

OrganizationIPBNB Abuse Contact
ASNAS152565
Network NameCLOUDONFIRE
CIDR Block31.42.125.0/24
RIRRIPE
CountryIN
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRstatic152.infra02.rdns.cloudonfire.com
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnamesstatic152.infra02.rdns.cloudonfire.com

🔐 DNS Hygiene

Hygiene Score60% (Good)
SPFPresent
DMARCPresent
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierUnknown — Insufficient routing data to classify
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Server—
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🛡️ Public Network Snapshot

Origin ASNAS152565
Network Prefix31.42.125.0/24
Route mappingFound

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
0%
00
routing
0%
00
services
0%
00
ownership
0%
00
reputation
0%
00
geolocation
25%
11
Overall4%11
Coverage: 1/6 dimensions · Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-07-03 10:49:20 UTC
Last Seen2026-08-27 17:33:35 UTC
Profile Built2026-08-29 04:06:38 UTC
Data FreshnessLive
Signal Types20
Total Observations22
🔍 20 signal types · 22 observations collected
This report is generated from 20+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 31.42.125.152

Who owns the IP address 31.42.125.152?

31.42.125.152 is registered to IPBNB Abuse Contact. The address falls within the 31.42.125.0/24 network block. Registration is held at RIPE.

Where is 31.42.125.152 located?

Geolocation data places 31.42.125.152 in Hong Kong. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 31.42.125.152 malicious or safe?

31.42.125.152 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.

What is the hostname for 31.42.125.152?

The reverse DNS (PTR) record for 31.42.125.152 is static152.infra02.rdns.cloudonfire.com. This hostname is not forward-confirmed, so it should be treated as a weak signal.

🏘️ Related IP Addresses

Nearby addresses in 31.42.125.0/24

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.