31.94.4.75📋 Copy

## IP Intelligence Briefing: 31.94.4.75/32

Classification: Low Risk / Passive Infrastructure

Date: 2026-07-29

---

Executive Summary

IP 31.94.4.75 presents a low-risk profile with a risk score of 25. The address belongs to EE-MOBILE (AS2856), a major British telecommunications provider. No active threat indicators, open services, or malicious activity observed. The IP is firewalled with no accessible services and resides in a clean subnet neighborhood.

---

Ownership & Geolocation

---

Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Provider Score: 0
• Authority Score: 0
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists

Risk Breakdown: No provider or authority scores elevated. The low risk score correlates with the IP being associated with a legitimate ISP infrastructure rather than a hosting or residential segment.

---

Network & Service Analysis

• Network Role: Firewalled / No Services
• Open Ports: None detected
• CDN/Cloud/VPN/Proxy: None
• Mobile Carrier: Not applicable
• TLS Certificate: None
• DNS Resolution: No PTR records, no forward resolution

The IP does not expose any services and is not associated with known hosting, proxy, or CDN infrastructure.

---

Threat Intelligence

• Known Campaigns: None
• Threat Feeds: No matches
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Likelihood: Not applicable

Historical Signal Count: 16 observations recorded

---

Behavioral Analysis

• Threat Persistence Days: Null (no persistent malicious activity)
• Is Persistently Malicious: False
• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0

The IP shows no behavioral patterns consistent with malicious activity.

---

Control Plane & Routing

• Origin ASN: 2856
• BGP Prefix: 31.94.0.0/16
• Route Stability: False
• RPKI State: Not assessed
• DNSSEC Valid: True
• Route Changes (30d): 0

---

Neighborhood Analysis

• Subnet: 31.94.4.75/24
• Abuse Density: 0 (clean subnet)
• Neighbor Count: 0
• High-Risk Siblings: 0
• Medium-Risk Siblings: 0
• Low-Risk Siblings: 0

The /24 subnet shows no abuse activity or suspicious neighbors.

---

Relationships

Three "Same Network" relationships identified, all pointing to the EE-MOBILE network. No external entity relationships (hostnames, organizations, certificates) detected.

---

Recommended Actions

No immediate security actions required. The IP presents a low-risk profile with no active threat indicators. Standard monitoring and logging practices are sufficient.

Firewall Rules: None recommended. The IP is firewalled with no accessible services.

---

Intelligence Notes

• The IP belongs to a major UK telecommunications provider (British Telecommunications PLC).
• Multiple geolocation signals confirm UK placement with high confidence.
• No evidence of abuse, hosting, or proxy services.
• Control plane shows valid DNSSEC and stable routing.
• Historical observations show consistent ISP classification with no degradation in risk posture.

Conclusion: This IP is part of legitimate telecommunications infrastructure. No defensive action required beyond standard traffic logging and monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.