# 31.192.254.116 — IP Intelligence Summary

31.192.254.116 is an IPv4 address operated by ELCAT-RIPE-MNT (AS42837), geolocated to Bishkek, Kyrgyzstan. Its reverse DNS name is 31-192-254-116.elcat.kg. As of November 6, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/31.192.254.116
- Last updated: 2026-11-06

## Ownership

- Organization: ELCAT-RIPE-MNT
- Network name: HOMELINE-KG-NET
- Allocated block: 31.192.254.0/24
- ASN: AS42837 (https://ipdebrief.com/asn/42837)
- Regional registry: RIPE

## Location

- City: Bishkek
- Region: Bishkek
- Country: Kyrgyzstan
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- 31-192-254-116.elcat.kg
- Forward-confirmed: no

## Exposed services

- 80/tcp — http

## Analyst narrative

The IP address 31.192.254.116/32 was classified as high risk with a risk score of 70. Ownership records indicated association with ASN 42837, ELCAT-RIPE-MNT, under the netname HOMELINE-KG-NET in Bishkek, Kyrgyzstan. Network scans confirmed the address was firewalled with no active services. Despite the lack of open ports, the address was correlated with 12 other IPs within campaign infrastructure and assigned a high likelihood of malicious activity. The address appeared in two DNS blacklists. Recommendations indicated a critical severity action to block the source, citing a high risk score with strong threat evidence. DNS hygiene was rated fair, with SPF and DMARC present but lacking DNSSEC and CAA records.

## Addresses sharing infrastructure

- 14.0.136.119 — Same server software (https://ipdebrief.com/14.0.136.119)
- 37.139.109.53 — Same server software (https://ipdebrief.com/37.139.109.53)
- 176.12.132.63 — Same server software (https://ipdebrief.com/176.12.132.63)
- 177.129.251.200 — Same server software (https://ipdebrief.com/177.129.251.200)
- 77.95.56.208 — Same abuse contact (https://ipdebrief.com/77.95.56.208)
- 77.95.57.89 — Same abuse contact (https://ipdebrief.com/77.95.57.89)
- 77.95.57.96 — Same abuse contact (https://ipdebrief.com/77.95.57.96)
- 77.95.57.104 — Same abuse contact (https://ipdebrief.com/77.95.57.104)
- 77.95.57.133 — Same abuse contact (https://ipdebrief.com/77.95.57.133)
- 94.143.197.59 — Same abuse contact (https://ipdebrief.com/94.143.197.59)
- 94.143.198.17 — Same abuse contact (https://ipdebrief.com/94.143.198.17)
- 94.143.198.102 — Same abuse contact (https://ipdebrief.com/94.143.198.102)

---

Source: IPDebrief, "31.192.254.116 IP intelligence", https://ipdebrief.com/31.192.254.116, updated 2026-11-06. Assessments are probabilistic.