IP Profile

🖥 31.171.130.118 — F.N.S. HOLDINGS LIMITED

F.N.S. HOLDINGS LIMITED · AS206092 · GB · 31.171.130.0/24 · IP Blocklists · threat 0.50 · 21x · 9 sources

reputation 50 (ELEVATED) · first seen 1d ago · last seen 1d ago
No special flags ip medium-severity auto-tagged

Reputation

50
ELEVATED

Threat Score

0.50
21 sightings

ASN

AS206092
from indicator

Peers on ASN

3
malicious co-tenants

Bad neighborhood

156
31.171.130.0/24

Country

GB
from indicator

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP31.171.130.118
OrganizationF.N.S. HOLDINGS LIMITED
ASNAS206092
Netname
Netblock
Reverse DNS (PTR)
CountryGB country intel

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS206092 neighborhood)

High (.5-.75)
4
Avg threat 0.5 · peak 0.5 across 4 local IPs on AS206092

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

auto-tagged
4
medium-severity
4
ip
4

🔌 Sources (ASN neighborhood)

FireHOL: stopforumspam.ipset
4
FireHOL: stopforumspam_7d.ipset
4
FireHOL: stopforumspam_30d.ipset
4
FireHOL: stopforumspam_90d.ipset
4
FireHOL: stopforumspam_180d.ipset
4
FireHOL: stopforumspam_365d.ipset
4
FireHOL abusers 30d
3
FireHOL: firehol_abusers_30d.netset
3
FireHOL: blocklist_net_ua.ipset
2

🌎 Geographic spread

📅 First-seen timeline

2026-08
4

Reporting Sources for this IP (9)

FireHOL: firehol_abusers_30d.netsetIP Blocklists
FireHOL: stopforumspam.ipsetIP Blocklists
FireHOL: stopforumspam_7d.ipsetIP Blocklists
FireHOL: stopforumspam_30d.ipsetIP Blocklists
FireHOL: stopforumspam_90d.ipsetIP Blocklists
FireHOL: stopforumspam_180d.ipsetIP Blocklists
FireHOL: stopforumspam_365d.ipsetIP Blocklists
FireHOL: blocklist_net_ua.ipsetIP Blocklists
FireHOL abusers 30dIP Reputation

Passive DNS — domains resolving here (0)

No passive DNS yet. Run DNS audit.

🏠 Same /24 — 31.171.130.0/24 (156 other malicious IPs)

Other flagged IPs in the same /24 — a concentration here suggests a compromised or abused block.

IPCategoryFamilyThreat
31.171.130.12 IP Blocklists- dossier
31.171.130.30 IP Blocklists- dossier
31.171.130.33 IP Blocklists- dossier
31.171.130.41 IP Blocklists- dossier
31.171.130.44 IP Blocklists- dossier
31.171.130.47 IP Blocklists- dossier
31.171.130.57 IP Blocklists- dossier
31.171.130.58 IP Blocklists- dossier
31.171.130.61 IP Blocklists- dossier
31.171.130.3 IP Blocklists- dossier
31.171.130.62 IP Blocklists- dossier
31.171.130.108 IP Blocklists- dossier
31.171.130.4 IP Blocklists- dossier
31.171.130.5 IP Blocklists- dossier
31.171.130.66 IP Blocklists- dossier
31.171.130.6 IP Blocklists- dossier
31.171.130.56 IP Blocklists- dossier
31.171.130.8 IP Blocklists- dossier
31.171.130.77 IP Blocklists- dossier
31.171.130.10 IP Blocklists- dossier
31.171.130.60 IP Blocklists- dossier
31.171.130.11 IP Blocklists- dossier
31.171.130.84 IP Blocklists- dossier
31.171.130.91 IP Blocklists- dossier
31.171.130.14 IP Blocklists- dossier
31.171.130.63 IP Blocklists- dossier
31.171.130.17 IP Blocklists- dossier
31.171.130.19 IP Blocklists- dossier
31.171.130.21 IP Blocklists- dossier
31.171.130.109 IP Blocklists- dossier
31.171.130.22 IP Blocklists- dossier
31.171.130.23 IP Blocklists- dossier
31.171.130.114 IP Blocklists- dossier
31.171.130.25 IP Blocklists- dossier
31.171.130.116 IP Blocklists- dossier
31.171.130.26 IP Blocklists- dossier
31.171.130.27 IP Blocklists- dossier
31.171.130.76 IP Blocklists- dossier
31.171.130.28 IP Blocklists- dossier
31.171.130.123 IP Blocklists- dossier
All in this subnet Bulk takedown

📡 Related indicators on AS206092 (3 total, 3 shown)

IPCategoryCountryThreat
31.171.130.17 IP BlocklistsGB dossier
31.171.130.116 IP BlocklistsGB dossier
31.171.130.114 IP BlocklistsGB dossier
Full ASN dossier →

Case & Takedown Links

No cases or takedowns yet.

+ Case Takedown

Enrichments

ipinfo

Stored Enrichment Data Enrich Now

1 enrichment records on file (history preserved).

Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php