JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

31.70.123.84

Recent Activity

Abuse confidence score ?

90% Critical

185 reports

16 reporters · latest 19 minutes ago

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	ip31-70-123-84.pbiaas.com
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 31.70.123.84

Export CSV

This IP address has been reported a total of 185 times from 16 distinct sources. 31.70.123.84 was first reported on September 30th 2026, and the most recent report was 19 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 126 reports; Australia with 23 reports; Singapore with 21 reports. The most common categories in these recent reports were: Brute-Force 158 times; Hacking 129 times; Fraud VoIP 19 times; Web App Attack 14 times; FTP Brute-Force 8 times; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 umjbnewman	2026-10-03 23:19:03 (19 minutes ago)	sipBan/invite_abuse: 15 INVITEs failed authentication in 24h from a source holding no registration. ... show more sipBan/invite_abuse: 15 INVITEs failed authentication in 24h from a source holding no registration. 6 distinct usernames attempted. source confirmed: completed SIP transaction (not spoofable). User-Agent: "NTE-RG-1402F build 6.3.1 SN:GE07005645 sofia-sip/1.12.10". show less	Fraud VoIP Hacking
🇺🇸 NetGuard	2026-10-03 18:26:25 (5 hours ago)	#honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Time ... show more #honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-03T18:04:26.641+00:00 Attacker IP: 31.70.123.84 \| Port: 5060 \| Country: Germany Honeypot: sentrypeer \| Attack: unknown Activity: 3 hits on port 5060 between 2026-10-03T18:04:26.641+00:00 and 2026-10-03T18:08:18.546+00:00 (6h window 2026-10-03T18:00:00.000Z) Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Web App Attack
🇺🇸 IndigoRidge	2026-10-03 14:04:10 (9 hours ago)	Knock-Knock SIP honeypot activity; time=2026-10-03 13:58:29; sip_method=INVITE; sip_dial_number=+171 ... show more Knock-Knock SIP honeypot activity; time=2026-10-03 13:58:29; sip_method=INVITE; sip_dial_number=+17134053587 show less	Fraud VoIP Brute-Force
🇺🇸 NetGuard	2026-10-03 12:11:35 (11 hours ago)	#honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Time ... show more #honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-03T12:04:31.336+00:00 Attacker IP: 31.70.123.84 \| Port: 5060 \| Country: Germany Honeypot: sentrypeer \| Attack: unknown Activity: 1 hit on port 5060 between 2026-10-03T12:04:31.336+00:00 and 2026-10-03T12:04:31.336+00:00 (6h window 2026-10-03T12:00:00.000Z) Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Web App Attack
🇺🇸 NetGuard	2026-10-03 06:41:53 (16 hours ago)	#honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Time ... show more #honeypot #netguard247 #sentrypeer Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-10-03T06:20:27.816+00:00 Attacker IP: 31.70.123.84 \| Port: 5060 \| Country: Germany Honeypot: sentrypeer \| Attack: unknown Activity: 3 hits on port 5060 between 2026-10-03T06:20:27.816+00:00 and 2026-10-03T06:28:32.496+00:00 (6h window 2026-10-03T06:00:00.000Z) Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Web App Attack
🇺🇸 drewf.ink	2026-10-03 05:08:40 (18 hours ago)	[05:08] SIP INVITE to 9017134053587 [external number] as 1000 (User-Agent: 'Sipd/0.1.0')	Brute-Force Hacking
🇺🇸 drewf.ink	2026-10-03 04:53:22 (18 hours ago)	[04:53] SIP INVITE to 81100017134053587 [external number] as 1000 (User-Agent: 'OBIHAI/OBi508-4.0.2. ... show more [04:53] SIP INVITE to 81100017134053587 [external number] as 1000 (User-Agent: 'OBIHAI/OBi508-4.0.2.5429') show less	Brute-Force Hacking
🇺🇸 drewf.ink	2026-10-03 04:38:05 (19 hours ago)	[04:38] SIP INVITE to 8000117134053587 [external number] as 1000 (User-Agent: '202 12-3864-8116-0.9. ... show more [04:38] SIP INVITE to 8000117134053587 [external number] as 1000 (User-Agent: '202 12-3864-8116-0.9.5.1.1741-SA7S4') show less	Brute-Force Hacking
🇺🇸 drewf.ink	2026-10-03 04:23:04 (19 hours ago)	[04:23] SIP INVITE to 68617134053587 [external number] as 1000 (User-Agent: 'ADTRAN_NetVanta_5660_Eo ... show more [04:23] SIP INVITE to 68617134053587 [external number] as 1000 (User-Agent: 'ADTRAN_NetVanta_5660_EoX_L2L3_Router/R13.5.0.E') show less	Brute-Force Hacking
🇺🇸 drewf.ink	2026-10-03 04:08:03 (19 hours ago)	[04:08] SIP INVITE to 67017134053587 [external number] as 1000 (User-Agent: 'C610A IP/42.076.00.000. ... show more [04:08] SIP INVITE to 67017134053587 [external number] as 1000 (User-Agent: 'C610A IP/42.076.00.000.000') show less	Brute-Force Hacking
🇺🇸 drewf.ink	2026-10-03 03:52:53 (19 hours ago)	[03:52] SIP INVITE to 6610017134053587 [external number] as 1000 (User-Agent: '001000-AT201-803D')	Brute-Force Hacking
🇺🇸 drewf.ink	2026-10-03 03:37:38 (20 hours ago)	[03:37] SIP INVITE to 650817134053587 [external number] as 1000 (User-Agent: 'Algo-8301/5.5')	Brute-Force Hacking
🇺🇸 drewf.ink	2026-10-03 03:22:31 (20 hours ago)	[03:22] SIP INVITE to 650200017134053587 [external number] as 1000 (User-Agent: 'Patton SN4171/1E15V ... show more [03:22] SIP INVITE to 650200017134053587 [external number] as 1000 (User-Agent: 'Patton SN4171/1E15VHP 00A0BA10F54E 3.21.2-23021 1.6 M5T SIP Stack/4.2.28.153') show less	Brute-Force Hacking
🇺🇸 drewf.ink	2026-10-03 03:07:29 (20 hours ago)	[03:07] SIP INVITE to 6500117134053587 [external number] as 1000 (User-Agent: 'OpenSIPS (3.4.8 (x86_ ... show more [03:07] SIP INVITE to 6500117134053587 [external number] as 1000 (User-Agent: 'OpenSIPS (3.4.8 (x86_64/linux))') show less	Brute-Force Hacking
Anonymous	2026-10-03 03:01:33 (20 hours ago)	2026-10-02 06:42:47,178 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 31.70.123.842026 ... show more 2026-10-02 06:42:47,178 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 31.70.123.842026-10-02 08:44:31,417 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 31.70.123.842026-10-02 10:45:58,644 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 31.70.123.842026-10-02 12:47:39,924 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 31.70.123.842026-10-02 14:51:31,270 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 31.70.123.842026-10-02 16:55:10,691 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 31.70.123.842026-10-02 18:57:13,833 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 31.70.123.842026-10-02 20:59:20,979 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 31.70.123.842026-10-02 23:01:32,142 fail2ban.actions\[3695\]: WARNING \[asterisk-iptables\] Ban 31.70.123.84 ... show less	Fraud VoIP Brute-Force SSH

Showing 1 to 15 of 185 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.22

🇮🇩 203.83.40.61

🇺🇸 157.230.138.1

🇧🇷 45.180.99.109

🇺🇸 35.252.231.152

🇨🇳 218.90.33.83

🇧🇷 205.210.31.245

🇧🇪 198.235.24.225

🇺🇸 196.247.46.236

🇳🇱 195.178.110.26

🇳🇱 93.123.109.6

🇺🇸 85.239.151.10

🇫🇷 85.217.140.20

🇺🇸 18.97.9.98

🇨🇳 218.23.170.184

🇨🇳 112.86.225.241

🇳🇱 109.160.32.173

🇻🇳 103.216.119.46

🇬🇧 78.153.140.237

🇺🇸 20.168.11.86