IPMediumSignal 28/100
31.97.125.147
Location
Frankfurt am Main, Hesse
ASN
AS47583
Hostinger DE
First Seen
Apr 23, 2026
Last Seen
Apr 30, 2026
Found in 5 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
28%
Signal Score
28 / 100
IDS Rule
No
Threat Context
Tags
Network Information
Country
Germany
RegionFrankfurt am Main, Hesse
ASNAS47583
OrganizationHostinger DE
Feed Intelligence Summary
5 reports28% confidence
5
Source reports
28%
Confidence score
Category tags
abusealienvault_ransomwarebad reputationeuropegermanyindicatorlithuanianetworkransomwareresearchedside windersidewinderthreat actortor nodeunited kingdom
Activity Timeline
Apr 30Apr 30
Threat Activity Heatmap
· Peak: 2026-04-30LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
28
SIGNAL
Signal Score
28%
Confidence
5
Reports
First seenApr 23, 2026
Last seenApr 30, 2026
GeolocationDE
CountryGermany
LocationFrankfurt am Main, Hesse
ASNAS47583
OrgHostinger DE
Coords51.4964, -0.1224
VirusTotal
Not checked
WHOIS
- description
- pivoting on pulse 6897447b49f0971e56200788
- raw
- inetnum: 31.97.120.0 - 31.97.127.255 netname: HOSTINGER-HOSTING country: DE geoloc: 50.110556 8.682222 geofeed: https://raw.githubusercontent.com/hostinger/geofeed/main/geofeed.csv admin-c: HN2912-RIPE tech-c: HN2912-RIPE status: ASSIGNED PA mnt-by: MNT-HOSTINGER created: 2025-05-30T11:53:15Z last-modified: 2025-05-30T11:53:15Z source: RIPE role: Hostinger NOC address: LITHUANIA address: Vilnius address: LT-03230 address: Svitrigailos str. 34, LT-03230 Vilnius, Lithuania phone: +13024640055 nic-hdl: HN2912-RIPE mnt-by: lir-lt-hostinger-1-MNT created: 2024-10-11T07:10:36Z last-modified: 2025-12-11T16:05:49Z source: RIPE # Filtered route: 31.97.120.0/21 descr: Hostinger DE origin: AS47583 mnt-by: MNT-HOSTINGER created: 2025-05-30T11:53:15Z last-modified: 2025-05-30T11:53:15Z source: RIPE
- references
- https://otx.alienvault.com/pulse/6897447b49f0971e56200788, https://otx.alienvault.com/pulse/64a77d566d9dee954cabc22b
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 month ago · Last seen 1 month ago
Appeared in 5 threat reports