JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

43.128.70.35

Recent Activity

Abuse confidence score ?

100% Critical

23 reports

21 reporters · latest 4 hours ago

ISP	Asia Pacific Network Information Center, Pty. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS132203
Domain Name	apnic.net
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 43.128.70.35

Export CSV

This IP address has been reported a total of 23 times from 21 distinct sources. 43.128.70.35 was first reported on October 1st 2026, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: France with 7 reports; United States of America with 4 reports; Ireland with 3 reports. The most common categories in these recent reports were: Web App Attack 11 times; Port Scan 9 times; Hacking 6 times; SQL Injection 1 time; SSH 1 time; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 sdos.es	2026-10-07 00:38:39 (4 hours ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
🇫🇷 Tilellit.PRO	2026-10-07 00:30:05 (5 hours ago)	Malicious web traffic detected by CrowdSec	Hacking
🇫🇷 Petre 21_ip	2026-10-06 22:47:21 (6 hours ago)	2026-10-07T00:47:20.680524+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-10-07T00:47:20.680524+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=43.128.70.35 DST=155.133.26.57 LEN=44 TOS=0x08 PREC=0x60 TTL=245 ID=3312 PROTO=TCP SPT=43553 DPT=8443 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Derek Linz	2026-10-06 22:00:55 (7 hours ago)	Automated: web scanner probing exploit paths: /old/.env, /backup/.env, /bak/.env, /backups/.env	Port Scan Web App Attack
🇫🇷 Kejult	2026-10-06 20:26:10 (9 hours ago)	Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 52 application-level events across ... show more Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 52 application-level events across 26 source port(s). Sensor(s): H0neytr4p, Tanner. show less	Port Scan
🇬🇧 gws-hostmaster	2026-10-06 13:42:13 (15 hours ago)	ModSecurity OWASP CRS (Anomaly Score: 13): Host header is a numeric IP address;Restricted File Acces ... show more ModSecurity OWASP CRS (Anomaly Score: 13): Host header is a numeric IP address;Restricted File Access Attempt;URL file extension is restricted by policy; show less	Web App Attack
🇺🇸 cwytech	2026-10-06 08:02:15 (21 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tactical-rmm-lockdown-high.	Hacking
🇸🇪 SkyDancer	2026-10-06 07:19:24 (22 hours ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
🇨🇦 Tanados	2026-10-06 04:55:15 (1 day ago)	Blocked by UFW [8443/tcp] Source port: 42231 TTL: 236 Packet length: 44 TOS: 0x08 This report was g ... show more Blocked by UFW [8443/tcp] Source port: 42231 TTL: 236 Packet length: 44 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 masterguru	2026-10-06 01:52:49 (1 day ago)	Host header is a numeric IP address. Pattern match "^ (920350-205)	Hacking Bad Web Bot
🇫🇷 spot	2026-10-06 01:51:03 (1 day ago)	43.128.70.35 - - [06/Oct/2026:02:51:02 +0100] "GET /.env HTTP/1.1" 404 4659 "-" "Mozilla/5.0" ...	Web App Attack VPN IP
🇺🇸 shabi	2026-10-05 21:39:46 (1 day ago)	UFW Blocked [8443/TCP] Source: 43.128.70.35:53722 TTL: 237 Lenth: 44 TOS: 0x00	Port Scan
🇮🇹 abuseiphack	2026-10-05 20:14:59 (1 day ago)	Automatic report for brute force attack	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-05 10:05:04 (1 day ago)	Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02 ... show more Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02] show less	Hacking SQL Injection Web App Attack
🇩🇪 zupan	2026-10-05 08:33:18 (1 day ago)	Blocked by UFW on vps [3000/tcp] \| SPT: 48066 \| TTL: 241 \| LEN: 44 \| TOS: 0x08 • Reported by: github ... show more Blocked by UFW on vps [3000/tcp] \| SPT: 48066 \| TTL: 241 \| LEN: 44 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.69.178.0

🇺🇸 157.245.251.16

🇹🇭 113.53.120.10

🇮🇩 103.28.148.61

🇨🇩 102.223.209.43

🇫🇷 91.196.152.188

🇫🇷 85.217.140.46

🇺🇸 76.23.252.134

🇩🇪 69.5.169.68

🇺🇸 66.132.186.250

🇹🇭 61.19.246.157

🇹🇼 59.125.153.223

🇯🇵 8.216.14.108

🇷🇴 2.57.122.238

🇧🇷 205.210.31.163

🇳🇱 195.178.110.217

🇺🇸 185.198.240.42

🇧🇷 177.6.233.170

🇧🇷 168.228.151.152

🇺🇸 162.216.150.142