Significant Threat
IP 185.31.200.132 identified as significant threat (8/10) from 26 events.
Multiple malicious indicators detected. Confidence level: 85%.
More threatening than 90% of monitored IPs
IP Address
185.31.200.132
IPv4
Public
NL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
The Netherlands
Location
Cgi Global Limited
ASN 56971
26
Reports
Mixed
Data Source
Threat Categories
Brute-Force
16
WP Login Brute Force
12
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 days indicates persistent threat actor operations.
First Observed
26. August 2026
Last Activity
27. August 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 56971) with generally good reputation. The ISP Cgi Global Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
5/10
Moderate
Confidence Score
67%
High Confidence
Confidence History
17. May 2026 - 27. Aug 2026
85%
Current
Stable
Trend
Security Reports (26)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 185.31.200.132
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
NL
- ASN
- AS56971
- ISP
- Cgi Global Limited
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 26
- First Reported
- 17 May 2026
- Last Reported
- 27 Aug 2026, 17:56
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS56971
Cgi Global Limited
FI
Network Threat Assessment
0/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
44
Total IPs Monitored
476
Total Reports
10.8
Reports per IP
Network Context
This IP address belongs to Cgi Global Limited (AS56971), which manages 44 IP addresses in our monitoring system. Out of these, 476 have been reported for suspicious activities, resulting in a network-wide threat level of 0/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 768,016 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
26
avg: 9
++
Network Comparison
Compared against 123 IPs in ASN 56971
Threat Level
8/10
network avg: 6.4
+
Total Reports
26
network avg: 6
++
Network Cgi Global Limited has overall threat level 0/10
Geographic Comparison
Compared against 16,481 IPs in NL
Threat Level
8/10
country avg: 5.9
+
Total Reports
26
country avg: 32
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 Aug 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Friday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
16
WP Login Brute Force
12
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 15:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
698,643 threat incidents tracked globally • Last 24h: 23,455 Logs
FEED
Top Threat Sources
-
01
United States135,030 19.3% -
02
Brazil109,436 15.7%
-
03
India75,811 10.9%
-
04
China43,138 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,481 2.4%
-
07
Argentina16,068 2.3%
-
08
Germany15,832 2.3%
-
09
Pakistan15,221 2.2%
-
10
Colombia15,077 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.5/10
Avg Threat
92%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
31.56.178.132
10/10
Confidence
100%
Reports
36
Location
US
US
31.57.27.21
10/10
Confidence
100%
Reports
13
Location
LV
LV
31.56.146.239
10/10
Confidence
98%
Reports
18
Location
FR
FR
31.59.105.179
10/10
Confidence
98%
Reports
18
Location
FR
FR
94.183.188.80
10/10
Confidence
98%
Reports
14
Location
FR
FR
217.60.3.128
8/10
Confidence
95%
Reports
11
Location
AE
AE
193.176.153.188
10/10
Confidence
94%
Reports
95
Location
FR
FR
217.60.1.76
10/10
Confidence
94%
Reports
21
Location
LV
LV
45.38.139.153
10/10
Confidence
94%
Reports
21
Location
LV
LV
31.56.228.161
10/10
Confidence
94%
Reports
15
Location
FR
FR
94.183.188.148
8/10
Confidence
94%
Reports
10
Location
FR
FR
31.56.179.100
10/10
Confidence
92%
Reports
13
Location
LV
LV
31.57.46.143
10/10
Confidence
89%
Reports
12
Location
US
US
185.92.182.129
10/10
Confidence
87%
Reports
64
Location
US
US
217.60.39.166
8/10
Confidence
87%
Reports
20
Location
FR
FR
31.56.204.231
10/10
Confidence
87%
Reports
8
Location
FI
FI
31.58.87.216
10/10
Confidence
86%
Reports
25
Location
US
US
31.58.78.194
8/10
Confidence
86%
Reports
8
Location
LV
LV
31.58.244.77
8/10
Confidence
80%
Reports
6
Location
TR
TR
94.183.186.131
10/10
Confidence
79%
Reports
18
Location
FR
FR
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
30%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.242.3.195
10/10
Confidence
100%
Reports
601
ISP
Netiface Limited
45.148.10.204
8/10
Confidence
100%
Reports
509
ISP
Techoff Srv Lim...
188.166.95.31
10/10
Confidence
100%
Reports
81
ISP
DigitalOcean, LLC
94.154.43.203
8/10
Confidence
100%
Reports
70
ISP
Storm Industrie...
213.176.16.100
10/10
Confidence
100%
Reports
54
ISP
Global Connecti...
77.239.124.102
10/10
Confidence
100%
Reports
50
ISP
Banatsync Srl
45.148.10.51
10/10
Confidence
100%
Reports
48
ISP
Techoff Srv Lim...
185.70.185.130
8/10
Confidence
100%
Reports
41
ISP
Hostkey B.v.
85.11.167.132
10/10
Confidence
100%
Reports
32
ISP
TechTies Inc.
213.111.144.104
8/10
Confidence
100%
Reports
29
ISP
SOLLUTIUM EU Sp...
45.148.10.249
10/10
Confidence
100%
Reports
27
ISP
Techoff Srv Lim...
83.83.112.125
10/10
Confidence
100%
Reports
27
ISP
Vodafone Libert...
20.224.168.82
10/10
Confidence
100%
Reports
24
ISP
Microsoft Corpo...
194.26.192.89
8/10
Confidence
100%
Reports
22
ISP
1337 Services GmbH
85.11.167.175
8/10
Confidence
100%
Reports
20
ISP
TechTies Inc.
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
85%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
66.132.172.175
8/10
Confidence
85%
Reports
7,563
Location
US
US
66.132.172.165
8/10
Confidence
85%
Reports
7,497
Location
US
US
66.132.172.164
8/10
Confidence
85%
Reports
7,492
Location
US
US
66.132.172.172
8/10
Confidence
85%
Reports
7,467
Location
US
US
66.132.172.174
8/10
Confidence
85%
Reports
7,434
Location
US
US
66.132.172.173
8/10
Confidence
85%
Reports
7,392
Location
US
US
66.132.172.170
8/10
Confidence
85%
Reports
7,324
Location
US
US
64.62.156.222
8/10
Confidence
85%
Reports
1,004
Location
US
US
167.94.146.52
8/10
Confidence
85%
Reports
977
Location
US
US
64.62.156.108
8/10
Confidence
85%
Reports
907
Location
US
US
65.49.1.132
8/10
Confidence
85%
Reports
867
Location
US
US
168.110.195.99
10/10
Confidence
85%
Reports
855
Location
ID
ID
184.105.139.70
8/10
Confidence
85%
Reports
851
Location
US
US
185.224.128.16
10/10
Confidence
85%
Reports
845
Location
NL
NL
74.82.47.2
8/10
Confidence
85%
Reports
792
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2