JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.43.63.70

31.43.63.70 was found in our database!

This IP was reported 189 times. Confidence of Abuse is 17%: ?

17%

ISP	Ukrainian Telecommunication Group LLC
Usage Type	Fixed Line ISP
ASN	AS50581
Domain Name	utelecom.com.ua
Country	🇺🇦 Ukraine
City	Kaharlyk, Kyiv Oblast

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.43.63.70

Whois 31.43.63.70

IP Abuse Reports for 31.43.63.70:

This IP address has been reported a total of 189 times from 86 distinct sources. 31.43.63.70 was first reported on November 22nd 2020, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 MatStef132	2026-07-25 09:08:51 (4 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇮🇩 sockominfo	2026-07-20 22:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 31.43.63.70. Threat Score: 6.1/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 31.43.63.70. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-20 21:00:52 (1 month ago)	Zimbra: Login failures from malicious IP: 31.43.63.70. Threat Score: 6.2/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 31.43.63.70. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-20 20:00:09 (1 month ago)	Zimbra: Login failures from malicious IP: 31.43.63.70. Threat Score: 4.8/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 31.43.63.70. Threat Score: 4.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇫🇷 MatStef132	2026-07-20 12:24:06 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
Anonymous	2026-07-20 08:10:25 (1 month ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=incognet.io; Paths=/?ulhgf=GVPn1U,/?zinh=b01i,/feed,/index.php,/register,/wp-admin/admin-ajax.php?vaaxzw=VUQCWBNQ; Country=UA; ASN=50581 Ukrainian Telecommunication Group LLC show less	DDoS Attack
🇮🇹 VHosting	2026-07-18 18:45:56 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇫🇷 MatStef132	2026-07-13 13:02:56 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇦🇺 oncord	2026-06-17 19:21:02 (2 months ago)	Form spam	Web Spam
🇬🇧 anycast_ac	2026-06-15 14:47:46 (2 months ago)	[WebProtection] L4/L7 attack source · L4-443-RATE-BAN · 5 hits/window	Port Scan DDoS Attack
🇩🇪 FeG Deutschland	2026-06-10 03:34:08 (2 months ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇺🇸 TPI-Abuse	2026-06-07 21:22:37 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 31.43.63.70 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 31.43.63.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 17:22:29.858928 2026] [security2:error] [pid 21398:tid 21398] [client 31.43.63.70:33004] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|qualityelevatorcabs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qualityelevatorcabs.com"] [uri "/[email protected]"] [unique_id "aiXhFQl2OfPEL6E5vM-V-wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-06-04 08:54:34 (2 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 xmission.com	2026-05-29 01:01:25 (2 months ago)	Blocked 10 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delistin ... show more Blocked 10 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible. show less	Email Spam
🇨🇦 polycoda	2026-05-09 16:33:32 (3 months ago)	📮 Sends email spam and/or tries to probe for a ton of inexistent email accounts to send spam to and/ ... show more 📮 Sends email spam and/or tries to probe for a ton of inexistent email accounts to send spam to and/or tries to brute force its way into an email account show less	Email Spam

Showing 1 to 15 of 189 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.39

🇺🇸 147.185.132.42

🇦🇷 45.160.156.149

🇧🇷 16.5.0.132

🇨🇳 14.103.123.169

🇩🇪 167.94.145.24

🇫🇮 147.185.133.93

🇩🇪 130.12.180.48

🇸🇬 108.162.227.97

🇺🇸 103.215.74.26

🇺🇸 91.230.168.233

🇺🇸 66.132.195.45

🇸🇬 47.128.61.242

🇧🇷 45.235.66.46

🇿🇦 41.193.79.96

🇷🇺 2.60.40.246

🇱🇹 213.176.26.95

🇺🇸 199.43.207.72

🇺🇸 172.68.174.209

🇩🇪 159.195.145.146