JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.172.89.36

144.172.89.36 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 81%: ?

81%

ISP	RouterHosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14956
Hostname(s)	36.89.172.144.static.cloudzy.com
Domain Name	cloudzy.com
Country	🇺🇸 United States of America
City	Ogden, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.172.89.36

Whois 144.172.89.36

IP Abuse Reports for 144.172.89.36:

This IP address has been reported a total of 31 times from 27 distinct sources. 144.172.89.36 was first reported on June 19th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 netclix.gr	2026-08-16 08:12:04 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 144.172.89.36 (US/United States/36.89.1 ... show more (mod_security) mod_security triggered on hostname [redacted] 144.172.89.36 (US/United States/36.89.172.144.static.cloudzy.com): (CF_ENABLE) show less	SQL Injection
🇩🇪 R.G.	2026-08-16 06:59:36 (1 week ago)	(ScanningForFiles) Scanning for files triggerd 144.172.89.36 (US/United States/36.89.172.144.static. ... show more (ScanningForFiles) Scanning for files triggerd 144.172.89.36 (US/United States/36.89.172.144.static.cloudzy.com): 10 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇫🇷 ingroscart.it	2026-08-16 06:56:47 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇫🇷 Little Iguana	2026-08-16 06:04:44 (1 week ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇫🇮 23p02732	2026-08-16 04:54:37 (1 week ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇦🇺 AWW-Admin	2026-08-16 01:05:25 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 144.172.89.36 (US/United States/36.89.1 ... show more (mod_security) mod_security triggered on hostname [redacted] 144.172.89.36 (US/United States/36.89.172.144.static.cloudzy.com) show less	SQL Injection
🇩🇪 dwmp	2026-08-15 23:55:49 (1 week ago)	[16/Aug/2026:01:55:48.288497 +0200] aoD8hCv4Y9OF84OvNPwNFwAAAFc 144.172.89.36 49386 38.242.227.117 7 ... show more [16/Aug/2026:01:55:48.288497 +0200] aoD8hCv4Y9OF84OvNPwNFwAAAFc 144.172.89.36 49386 38.242.227.117 7080 [16/Aug/2026:01:55:48.418232 +0200] aoD8hCv4Y9OF84OvNPwNGAAAAEk 144.172.89.36 49396 38.242.227.117 7080 [16/Aug/2026:01:55:48.553682 +0200] aoD8hJpffnyq6NwqotuJjAAAAAI 144.172.89.36 49412 38.242.227.117 7080 ... show less	Brute-Force SSH
🇫🇷 phoenix1jl96	2026-08-15 21:53:22 (1 week ago)	[Sat Aug 15 23:52:59.433402 2026] [proxy_fcgi:error] [pid 2843119:tid 2843119] [client 144.172.89.36 ... show more [Sat Aug 15 23:52:59.433402 2026] [proxy_fcgi:error] [pid 2843119:tid 2843119] [client 144.172.89.36:18936] AH01071: Got error 'Primary script unknown' [Sat Aug 15 23:53:04.560237 2026] [proxy_fcgi:error] [pid 2843119:tid 2843119] [client 144.172.89.36:18936] AH01071: Got error 'Primary script unknown' [Sat Aug 15 23:53:06.729612 2026] [proxy_fcgi:error] [pid 2843119:tid 2843119] [client 144.172.89.36:18936] AH01071: Got error 'Primary script unknown' [Sat Aug 15 23:53:19.063497 2026] [proxy_fcgi:error] [pid 2843650:tid 2843650] [client 144.172.89.36:22808] AH01071: Got error 'Primary script unknown' [Sat Aug 15 23:53:19.847311 2026] [proxy_fcgi:error] [pid 2843650:tid 2843650] [client 144.172.89.36:22808] AH01071: Got error 'Primary script unknown' ... show less	DNS Compromise DNS Poisoning DDoS Attack Web Spam Port Scan Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇩🇪 8legz.net	2026-08-15 16:42:58 (1 week ago)	[Sat Aug 15 17:42:42.819914 2026] [php:error] [pid 2086380] [client 144.172.89.36:55706] script '/va ... show more [Sat Aug 15 17:42:42.819914 2026] [php:error] [pid 2086380] [client 144.172.89.36:55706] script '/var/www/html/.env.php' not found or unable to stat, referer: http://148.251.3.99:80/.env.php [Sat Aug 15 17:42:53.586329 2026] [php:error] [pid 2086380] [client 144.172.89.36:55706] script '/var/www/html/wp-config.php' not found or unable to stat, referer: http://148.251.3.99:80/wp-config.php [Sat Aug 15 17:42:58.160106 2026] [php:error] [pid 2086380] [client 144.172.89.36:55706] script '/var/www/html/configuration.php' not found or unable to stat, referer: http://148.251.3.99:80/configuration.php ... show less	Brute-Force
🇩🇪 maxpower	2026-08-15 12:52:18 (1 week ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 144.172.89.36 (US/United States/36.89.17 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 144.172.89.36 (US/United States/36.89.172.144.static.cloudzy.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 144.172.89.36 - - [15/Aug/2026:14:52:13 +0200] "GET /.database.env HTTP/1.1" 404 10389 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" host=51.89.20.64 show less	Port Scan
🇩🇪 big-cloud.nl	2026-08-15 10:45:01 (2 weeks ago)	Try to access /.env	Web App Attack
🇬🇧 Apache	2026-08-15 09:51:42 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 144.172.89.36 (US/United States/36.89.172.144.s ... show more (mod_security) mod_security (id:210492) triggered by 144.172.89.36 (US/United States/36.89.172.144.static.cloudzy.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇫🇷 Vaction	2026-08-15 08:49:26 (2 weeks ago)	144.172.89.36 - - [15/Aug/2026:10:49:25 +0200] "GET /.env HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Window ... show more 144.172.89.36 - - [15/Aug/2026:10:49:25 +0200] "GET /.env HTTP/1.1" 404 381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Hacking Bad Web Bot Web App Attack
🇫🇷 Thibault Millant	2026-08-15 07:33:06 (2 weeks ago)	144.172.89.36 - - [15/Aug/2026:07:32:46 +0000] "GET /.mysql.env HTTP/1.1" 404 181 "http://91.121.210 ... show more 144.172.89.36 - - [15/Aug/2026:07:32:46 +0000] "GET /.mysql.env HTTP/1.1" 404 181 "http://91.121.210.93:80/.mysql.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Brute-Force Exploited Host SSH
🇺🇸 masterguru	2026-08-15 05:27:25 (2 weeks ago)	Host header is a numeric IP address. Pattern match "^ (920350-205)	Hacking Bad Web Bot

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 143.42.1.44

🇮🇩 103.191.39.2

🇸🇬 103.187.147.0

🇲🇩 77.89.214.250

🇧🇷 45.174.80.202

🇹🇼 198.235.24.94

🇺🇸 192.111.147.14

🇷🇺 176.65.46.211

🇰🇷 175.45.204.121

🇫🇮 147.185.133.237

🇮🇳 103.239.138.30

🇹🇷 94.154.43.75

🇺🇸 65.49.1.82

🇹🇼 49.159.53.216

🇮🇳 49.37.100.103

🇿🇦 41.185.8.219

🇺🇸 40.124.114.106

🇺🇸 216.73.216.57

🇵🇸 213.6.207.62

🇲🇽 187.145.189.37