Critical Alert
Security alert: 31.76.52.52 rated 10/10 based on 12 verified incidents.
Threat profile indicates sustained malicious activity with 89% confidence rating.
More threatening than 100% of monitored IPs
IP Address
31.76.52.52
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
United States
Location
Serv.host Group Ltd
ASN 207957
12
Reports
Honeypot
Data Source
Threat Categories
Hacking
12
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
29. October 2026
Last Activity
29. October 2026
Recent (7 days)
12 incidents
Reputable Network
This IP is hosted on a network (ASN 207957) with generally good reputation. The ISP Serv.host Group Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
89%
Verified
Confidence History
29. Oct 2026
89%
Current
Stable
Trend
Security Reports (12)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 31.76.52.52
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS207957
- ISP
- Serv.host Group Ltd
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 12
- First Reported
- 29 Oct 2026
- Last Reported
- 29 Oct 2026, 18:50
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS207957
Serv.host Group Ltd
US
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
12
Total IPs Monitored
84
Total Reports
7
Reports per IP
Network Context
This IP address belongs to Serv.host Group Ltd (AS207957), which manages 12 IP addresses in our monitoring system. Out of these, 84 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,294,565 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
12
avg: 7
++
Network Comparison
Compared against 53 IPs in ASN 207957
Threat Level
10/10
network avg: 7.3
+
Total Reports
12
network avg: 45
--
Network Serv.host Group Ltd has overall threat level 2/10
Geographic Comparison
Compared against 200,321 IPs in US
Threat Level
10/10
country avg: 6.6
++
Total Reports
12
country avg: 16
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 Oct 2026
12 reports
Daily Average
0.4
reports/day
Most Active
Thursday
12 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
12
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
1,180,112 threat incidents tracked globally • Last 24h: 26,863 Logs
FEED
Top Threat Sources
-
01
Brazil258,679 21.9% -
02
United States200,379 17%
-
03
India102,658 8.7% -
04
China49,731 4.2% -
05
Argentina41,956 3.6% -
06
SC29,413 2.5% -
07
Mexico27,462 2.3% -
08
Russia26,533 2.2% -
09
Colombia24,035 2% -
10
Germany23,008 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.2/10
Avg Threat
36%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
144.31.15.22
10/10
Confidence
94%
Reports
48
Location
US
US
31.76.85.80
8/10
Confidence
93%
Reports
1,871
Location
US
US
2.27.209.1
10/10
Confidence
92%
Reports
230
Location
US
US
94.156.155.79
8/10
Confidence
42%
Reports
20
Location
BG
BG
80.66.85.222
8/10
Confidence
30%
Reports
57
Location
DE
DE
31.76.60.167
7/10
Confidence
28%
Reports
1
Location
US
US
144.31.103.208
6/10
Confidence
27%
Reports
1
Location
US
US
2.26.10.242
10/10
Confidence
24%
Reports
11
Location
US
US
150.241.74.83
7/10
Confidence
24%
Reports
5
Location
US
US
31.76.83.201
6/10
Confidence
24%
Reports
2
Location
US
US
91.196.33.39
4/10
Confidence
24%
Reports
2
Location
RU
RU
31.76.83.159
7/10
Confidence
24%
Reports
2
Location
US
US
144.31.249.203
7/10
Confidence
24%
Reports
2
Location
US
US
144.31.241.110
7/10
Confidence
24%
Reports
1
Location
US
US
31.76.60.162
7/10
Confidence
24%
Reports
1
Location
US
US
31.76.60.156
7/10
Confidence
24%
Reports
1
Location
US
US
2.26.89.85
7/10
Confidence
24%
Reports
1
Location
US
US
13.143.188.186
5/10
Confidence
23%
Reports
1
Location
US
US
2.26.93.239
6/10
Confidence
23%
Reports
1
Location
US
US
91.196.33.55
6/10
Confidence
23%
Reports
1
Location
RU
RU
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
35.196.98.155
8/10
Confidence
100%
Reports
53
ISP
Google LLC
104.28.201.73
10/10
Confidence
100%
Reports
50
ISP
Cloudflare, Inc.
52.168.141.47
10/10
Confidence
100%
Reports
42
ISP
MICROSOFT-CORP-...
166.62.41.13
10/10
Confidence
100%
Reports
33
ISP
GoDaddy.com, LLC
77.239.124.46
10/10
Confidence
100%
Reports
32
ISP
Banatsync Srl
104.28.228.77
8/10
Confidence
100%
Reports
31
ISP
Cloudflare, Inc.
104.28.228.78
10/10
Confidence
100%
Reports
30
ISP
Cloudflare, Inc.
104.28.196.77
8/10
Confidence
100%
Reports
29
ISP
Cloudflare, Inc.
104.28.196.78
8/10
Confidence
100%
Reports
29
ISP
Cloudflare, Inc.
199.19.225.232
10/10
Confidence
100%
Reports
25
ISP
FranTech Solutions
157.230.218.106
10/10
Confidence
100%
Reports
24
ISP
DigitalOcean, LLC
34.139.102.100
8/10
Confidence
100%
Reports
23
ISP
Google LLC
129.121.99.2
10/10
Confidence
100%
Reports
23
ISP
Oracle Corporation
165.154.162.74
10/10
Confidence
100%
Reports
21
ISP
UCLOUD INFORMAT...
34.74.37.180
8/10
Confidence
100%
Reports
20
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
89%
Avg Confidence
13
High Threat
High-risk network: Majority of related IPs are flagged
211.51.132.104
10/10
Confidence
89%
Reports
37
Location
KR
KR
91.196.152.225
10/10
Confidence
89%
Reports
203
Location
FR
FR
193.124.20.250
8/10
Confidence
89%
Reports
31
Location
DE
DE
185.216.145.167
10/10
Confidence
89%
Reports
24
Location
GB
GB
91.196.152.46
10/10
Confidence
89%
Reports
172
Location
FR
FR
118.26.38.29
10/10
Confidence
89%
Reports
22
Location
HK
HK
114.119.150.254
6/10
Confidence
89%
Reports
36
Location
SG
SG
47.128.35.225
6/10
Confidence
89%
Reports
15
Location
SG
SG
139.224.207.97
10/10
Confidence
89%
Reports
28
Location
CN
CN
160.25.94.218
8/10
Confidence
89%
Reports
17
Location
PH
PH
109.243.0.231
8/10
Confidence
89%
Reports
11
Location
PL
PL
69.5.169.135
8/10
Confidence
89%
Reports
26
Location
DE
DE
13.140.151.13
10/10
Confidence
89%
Reports
12
Location
FR
FR
193.124.20.236
10/10
Confidence
89%
Reports
44
Location
DE
DE
103.252.123.105
10/10
Confidence
89%
Reports
41
Location
VN
VN