IP Address

31.70.75.122

IPv4 Public
DE DE
AS8560
IONOS SE
174 Reports
This IP is on the Blacklist High confidence threat - blocking recommended
8/10 Threat
91% Confidence
174 Reports

Threat Intelligence Analysis

AI-generated security assessment based on aggregated threat data

Above Average Risk
DE
Germany Location
IONOS SE ASN 8560
174 Reports
Honeypot Data Source

Substantial Risk

IP 31.70.75.122 is a high-risk German address with a threat level of 8/10 that has been linked to 174 reported incidents of suspicious activity, with automated honeypot sensors flagging it primarily for VoIP fraud activity in May 2026.

Evidence shows 91% confidence in malicious intent across 20 recent reports specifically documenting Fraud VoIP patterns. The address originates from IONOS SE's network (AS8560), a major European hosting provider, which explains its active involvement in telecommunications fraud operations. Detection occurred solely through automated honeypot sensors without community reporting, suggesting automated exploitation attempts rather than opportunistic scanning. The address was first and last reported within the same month, indicating a concentrated but significant burst of malicious activity against exposed VoIP infrastructure.

VoIP fraud exploits telephone systems to make unauthorized calls, often routing through compromised systems to premium rate numbers for financial gain. This activity poses direct financial risk to organizations with inadequately secured phone infrastructure, potentially generating substantial unauthorized charges in a short timeframe. The high activity frequency of 8/10 indicates persistent automated probing rather than casual reconnaissance, meaning the operator behind this address is systematically hunting for vulnerable VoIP deployments.

Site operators should immediately audit VoIP systems for weak or default credentials and enforce strong multi-factor authentication across all telephony access points. Implementing call pattern monitoring and alerting can detect anomalies indicative of compromise, while restricting international and premium-rate dialing limits the financial impact of any successful exploitation. Deploying rate-limiting tools such as fail2ban on authentication interfaces and blocking known scanning infrastructure at the network perimeter provides additional layers of defence against this persistent threat actor.

More threatening than 84% of monitored IPs

Threat Categories

Fraud VoIP 30

Technical Details

VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.

Recommended Mitigations

Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.

Moderate Network Risk

The network hosting this IP (ASN 8560, operated by IONOS SE) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.

Consider the network context when assessing this individual IP.

Security Recommendations

Continue monitoring for emerging patterns.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 8/10 High
Confidence Score 67% High Confidence

Confidence History

11. May 2026
91% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (30)

Date Categories Source Confidence
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%

Technical Details

Basic Information

IP Address
31.70.75.122
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
DE DE
ASN
AS8560
ISP
IONOS SE

DNS Information

Reverse DNS
ip31-70-75-122.pbiaas.com
PTR Record
Yes
Connection Type
Dynamic

Statistics

Total Reports
174
First Reported
10 May 2026
Last Reported
11 May 2026, 21:38

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS8560
IONOS SE
ES ES

Network Threat Assessment

5/10
This network has low threat indicators with minimal suspicious activity.

Network Statistics

464
Total IPs Monitored
29,122
Total Reports
62.8
Reports per IP

Network Context

This IP address belongs to IONOS SE (AS8560), which manages 464 IP addresses in our monitoring system. Out of these, 29,122 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.

Network notice: This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.

Comparative Analysis

How this IP compares to others in our threat intelligence database

84 %

Global Threat Ranking

This IP is more threatening than 84% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 291,148 reported IPs worldwide

Threat Level 8/10 avg: 5.9 +
Total Reports 174 avg: 18 ++

Network Comparison

Compared against 731 IPs in ASN 8560

Threat Level 8/10 network avg: 6.3 +
Total Reports 174 network avg: 85 ++
Network IONOS SE has overall threat level 5/10

Geographic Comparison

Compared against 9,808 IPs in DE

Threat Level 8/10 country avg: 6.4 +
Total Reports 174 country avg: 50 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

273,117 threat incidents tracked globally • Last 24h: 17,988 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    61,416 22.5%
  2. 02
    IN
    India IN
    45,207 16.6%
  3. 03
    CN
    China CN
    34,018 12.5%
  4. 04
    BR
    Brazil BR
    14,619 5.4%
  5. 05
    DE
    Germany DE THIS IP
    9,805 3.6%
  6. 06
    SG
    Singapore SG
    7,922 2.9%
  7. 07
    ID
    Indonesia ID
    7,825 2.9%
  8. 08
    PK
    Pakistan PK
    7,756 2.8%
  9. 09
    RU
    Russia RU
    6,140 2.2%
  10. 10
    NL
    Netherlands NL
    5,868 2.1%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same Autonomous System (AS) network provider.

20 Related IPs
8.8/10 Avg Threat
100% Avg Confidence
20 High Threat
High-risk network: Majority of related IPs are flagged

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "31.70.75.122",
    "threat_level": 8,
    "confidence_score": 91,
    "total_reports": 174,
    "country_code": "DE",
    "isp_name": "IONOS SE",
    "asn": "8560",
    "first_reported": "2026-05-10 00:37:04",
    "last_reported": "2026-05-11 21:38:47",
    "exported_at": "2026-07-26T01:50:40+02:00",
    "source": "https://reportedip.de/ip/31.70.75.122/"
}

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.