JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.172.104.106

144.172.104.106

Activity Trending Down

45 reports found in our database

38% ▼ ▼ ▼ Elevated

Abuse confidence score ?

ISP

RouterHosting LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14956

Hostname(s)

106.104.172.144.static.cloudzy.com

Domain Name

cloudzy.com

Country

🇺🇸 United States of America

City

Ogden, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 144.172.104.106:

This IP address has been reported a total of 45 times from 36 distinct sources. 144.172.104.106 was first reported on July 24th 2025, and the most recent report was 3 weeks ago. In the last 60 days, the top reporter locations were: Indonesia with 5 reports; Germany with 3 reports; United States of America with 3 reports. The most common categories in these recent reports were: Web App Attack 12 times; Port Scan 5 times; Hacking 5 times; Brute-Force 4 times; Bad Web Bot 4 times; Other 10 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 genokrad	2026-08-05 10:53:32 (3 weeks ago)	Unauthorized connection attempt on TCP/25 (SMTP)	Port Scan
🇩🇪 wiredalter	2026-07-30 03:13:59 (1 month ago)	Blocked by UFW on dVPS [25/tcp] Source Port: 58532 TTL: 112 Packet Length: 48 TOS: 0x00 Analyzed by ... show more Blocked by UFW on dVPS [25/tcp] Source Port: 58532 TTL: 112 Packet Length: 48 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Port Scan Brute-Force
🇪🇸 pipeline.es	2026-07-24 17:59:17 (1 month ago)	Web scanning / probing for vulnerable paths \| URL: /jancox/alfacgiapi/bash.alfa \| Evidence: billytur ... show more Web scanning / probing for vulnerable paths \| URL: /jancox/alfacgiapi/bash.alfa \| Evidence: billyturismo.com.br 144.172.104.106 - - [24/Jul/2026:19:58:15 +0200] \"GET /jancox/alfacgiapi/bash.alfa HTTP/1.1\" 404 19522 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=US \| ASN: ROUTERHOSTING \| Country: US show less	Port Scan Web App Attack
🇺🇸 agenciahypelab.com.br	2026-07-24 17:41:51 (1 month ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
Anonymous	2026-07-24 17:07:11 (1 month ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇮🇩 David Koswari	2026-07-24 05:15:00 (1 month ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇳🇴 jad-abuse	2026-07-23 12:33:04 (1 month ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor( ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Observed by 1 sensor(s); 30 hits. show less	Port Scan Bad Web Bot
🇫🇷 masterguru	2026-07-23 12:07:19 (1 month ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)	Hacking
🇷🇺 DZBOT	2026-07-23 12:06:10 (1 month ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇩 Burayot	2026-07-23 07:23:04 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 144.172.104.106 (US/United States/1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 144.172.104.106 (US/United States/106.104.172.144.static.cloudzy.com): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 origrata	2026-07-23 06:52:32 (1 month ago)	[OGWAF] path_traversal attack blocked \| severity: high \| POST /alfacgiapi/bash.alfa \| UA: Mozilla/5. ... show more [OGWAF] path_traversal attack blocked \| severity: high \| POST /alfacgiapi/bash.alfa \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36 show less	Hacking Web App Attack
🇺🇸 fazar	2026-07-23 06:52:04 (1 month ago)	crowdsecurity/http-probing on node: us01	Web App Attack Hacking
🇮🇩 rafli	2026-07-23 06:49:47 (1 month ago)	{"level":"info","ts":1784789383.5121646,"logger":"http.log.access.log7","msg":"handled request","req ... show more {"level":"info","ts":1784789383.5121646,"logger":"http.log.access.log7","msg":"handled request","request":{"remote_ip":"144.172.104.106","remote_port":"44298","client_ip":"144.172.104.106","proto":"HTTP/2.0","method":"GET","host":"auth.oncall.id","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36"],"Accept":["/"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"auth.oncall.id","ech":false}},"bytes_read":0,"user_id":"","duration":0.003759731,"size":139,"status":404,"resp_headers":{"Via":["1.1 Caddy"],"Content-Length":["139"],"Content-Security-Policy":["default-src 'none'"],"X-Content-Type-Options":["nosniff"],"Permissions-Policy":["accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()"],"Referrer-Policy":["strict-origin-when-cross-origin"],"Date":["Thu, 23 Jul 2026 06:49:43 GMT"],"X-Powered-By":["Express"],"Content-Ty ... show less	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-23 06:29:44 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 144.172.104.106 (US/United States/1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 144.172.104.106 (US/United States/106.104.172.144.static.cloudzy.com): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 pltcldvlpr	2026-07-23 04:25:49 (1 month ago)	CMS/framework probe: 144.172.104.106 - - [23/Jul/2026:06:25:46 +0200] "POST /alfacgiapi/bash.alfa HT ... show more CMS/framework probe: 144.172.104.106 - - [23/Jul/2026:06:25:46 +0200] "POST /alfacgiapi/bash.alfa HTTP/2.0" 404 1499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" asn=14956 org="RouterHosting LLC" country=US 144.172.104.106 - - [23/Jul/2026:06:25:46 +0200] "GET /alfacgiapi/bash.alfa HTTP/2.0" 404 1499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" asn=14956 org="RouterHosting LLC" country=US 144.172.104.106 - - [23/Jul/2026:06:25:46 +0200] "POST /alfacgiapi/perl.alfa HTTP/2.0" 404 1499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" asn=14956 org="RouterHosting LLC" country=US 144.172.104.106 - - [23/Jul/2026:06:25:46 +0200] "GET /alfacgiapi/perl.alfa HTTP/2.0" 404 1499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" asn=14956 org="RouterHosting LLC" country=US 144.172.104.106 - - [23/J ... show less	Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 172.69.166.21

🇺🇸 64.62.156.201

🇧🇷 186.192.36.56

🇻🇳 171.244.37.97

🇧🇷 168.205.190.150

🇮🇳 128.185.253.122

🇺🇸 20.169.55.196

🇨🇦 20.48.179.39

🇳🇱 195.178.110.227

🇦🇷 143.202.97.170

🇲🇽 138.122.147.244

🇺🇸 52.248.42.76

🇫🇷 34.155.76.59

🇨🇦 20.151.8.82

🇨🇦 20.48.251.3

🇰🇷 222.116.10.170

🇺🇸 172.217.107.16

🇫🇷 85.217.140.32

🇩🇪 34.107.88.250

🇺🇾 201.217.132.180