31.40.19.4
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Ketnet Telecom Ltd
- Usage Type
- Fixed Line ISP
- ASN
- AS197131
- Domain Name
- ua-cat.net
- Country
- 🇺🇦 Ukraine
- City
- Podilsk, Odesa
Abuse Reports
Total reports
15 from
15 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Kitki30.com |
Entered Telnet Tarpit (endlessh, server 3).
Log: 2026-09-19T04:47:13.106Z ACCEPT host=::ffff:31.40.19.4 port=56230 fd=441 n=438/4096
|
IoT Targeted Port Scan Brute-Force | |
| 🇰🇷 winter |
Connection attemp from 31.40.19.4 to port 22
|
Brute-Force SSH | |
| 🇫🇷 TheHoneyPotter |
Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-09-11T11:31:40.624Z ACCEPT host=::ffff:31.40.19.4 port=55132 fd=4 n=1/4096
...
|
Brute-Force SSH | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 MPL |
tcp/23 (3 or more attempts)
|
Port Scan | |
| Anonymous |
Try to connect to Port_Scan_23_stealth
|
Port Scan | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| Anonymous |
Drop from IP address 31.40.19.4 to tcp-port 23
|
Port Scan | |
| 🇫🇷 jonahtebaa |
SSH tarpit capture
|
Port Scan Brute-Force SSH | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=36931 dstport=23
|
Port Scan | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: Telnet (7 total hits)
|
Brute-Force | |
| 🇺🇸 RAP |
2026-08-09 00:52:20 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 21774
TTL: 44
Packet length: 60
TOS: 0x00
This report (for 31.40.19.4) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:56898 dst:23
|
Port Scan | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown