JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.172.96.139

144.172.96.139 was found in our database!

This IP was reported 303 times. Confidence of Abuse is 100%: ?

100%

ISP	RouterHosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14956
Hostname(s)	139.96.172.144.static.cloudzy.com
Domain Name	cloudzy.com
Country	🇺🇸 United States of America
City	Ogden, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.172.96.139

Whois 144.172.96.139

IP Abuse Reports for 144.172.96.139:

This IP address has been reported a total of 303 times from 193 distinct sources. 144.172.96.139 was first reported on June 4th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 tmiland	2026-06-27 21:21:52 (1 hour ago)	(nginx_404) Dot directory Honeypot Trap 144.172.96.139 (US/United States/139.96.172.144.static.cloud ... show more (nginx_404) Dot directory Honeypot Trap 144.172.96.139 (US/United States/139.96.172.144.static.cloudzy.com): 2 in the last 3600 secs; IP: 144.172.96.139; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 144.172.96.139 - - [27/Jun/2026:23:21:49 +0200] "GET /.env HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 144.172.96.139 - - [27/Jun/2026:23:21:49 +0200] "GET /.env.local HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" show less	Brute-Force
🇩🇪 Mykola Spesivtsev	2026-06-27 19:44:16 (3 hours ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0 ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Sa show less	Port Scan Web App Attack Bad Web Bot
🇳🇱 BlueWire Hosting	2026-06-27 18:04:56 (4 hours ago)	Probing websites for vulnerabilities	Web App Attack
🇩🇪 gadix	2026-06-27 18:03:19 (4 hours ago)	[27/Jun/2026:20:03:15.138256 +0200] akAQYwbfa_Rg-AJYPAfyHwAAAFc 144.172.96.139 46532 127.0.0.1 7080 ... show more [27/Jun/2026:20:03:15.138256 +0200] akAQYwbfa_Rg-AJYPAfyHwAAAFc 144.172.96.139 46532 127.0.0.1 7080 [27/Jun/2026:20:03:15.146669 +0200] akAQY_mjpzpnCHuntrHFugAAARQ 144.172.96.139 43810 127.0.0.1 7081 [27/Jun/2026:20:03:19.407845 +0200] akAQZ7tOgGRNHF9UVv4H8QAAABI 144.172.96.139 55460 127.0.0.1 7080 ... show less	Web App Attack
🇩🇪 bescared	2026-06-27 17:23:03 (5 hours ago)	F2B - Malicious activity detected. URL Probing. -c0423ad6-	Hacking Web App Attack
🇩🇪 Hazzard	2026-06-27 16:53:42 (5 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇩🇪 MBombeck	2026-06-27 15:47:21 (6 hours ago)	Fail2Ban: traefik-botsearch on edge-01.ioioio.dev	Port Scan Web App Attack
🇦🇺 AWW-Admin	2026-06-27 13:32:40 (9 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 144.172.96.139 (US/United States/139.96 ... show more (mod_security) mod_security triggered on hostname [redacted] 144.172.96.139 (US/United States/139.96.172.144.static.cloudzy.com) show less	SQL Injection
🇬🇧 Apache	2026-06-27 13:11:18 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 144.172.96.139 (US/United States/139.96.172.144 ... show more (mod_security) mod_security (id:210492) triggered by 144.172.96.139 (US/United States/139.96.172.144.static.cloudzy.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
Anonymous	2026-06-27 12:23:35 (10 hours ago)	Unauthorized access (443/tcp/https)	Port Scan Web App Attack
🇦🇺 clapper	2026-06-27 10:41:03 (12 hours ago)	(mod_security) mod_security (id:949110) triggered by 144.172.96.139 (US/United States/139.96.172.144 ... show more (mod_security) mod_security (id:949110) triggered by 144.172.96.139 (US/United States/139.96.172.144.static.cloudzy.com): 3 in the last 3600 secs; ID: LUC show less	Brute-Force Bad Web Bot
🇵🇱 pshost.pl	2026-06-27 08:14:42 (14 hours ago)	2026-06-27T08:14:42.375Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ... show more 2026-06-27T08:14:42.375Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 144.172.96.139. show less	Port Scan Brute-Force SSH
🇳🇱 spirttm	2026-06-27 08:07:29 (14 hours ago)	144.172.96.139 - - [27/Jun/2026:08:07:18 +0000] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windo ... show more 144.172.96.139 - - [27/Jun/2026:08:07:18 +0000] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 144.172.96.139 - - [27/Jun/2026:08:07:19 +0000] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 144.172.96.139 - - [27/Jun/2026:08:07:22 +0000] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 144.172.96.139 - - [27/Jun/2026:08:07:23 +0000] "GET /.env.bak HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 144.172.96.139 - - [27/Jun/2026:08:07:25 +0000] "GET /.env.backup HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.3 ... show less	Port Scan Web App Attack
🇩🇪 ManagedStack	2026-06-27 07:00:01 (15 hours ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
🇩🇪 barbarella	2026-06-27 04:05:59 (18 hours ago)	Multiple (51) times attack on http port 80: Configuration snooping with .env file (GET /.env) 04: ... show more Multiple (51) times attack on http port 80: Configuration snooping with .env file (GET /.env) 04:06:00 Configuration snooping with .env file (GET /.env) 04:06:00 Configuration snooping in .env file (GET /.env.local) 04:06:00 Configuration snooping in .env file (GET /.env.production) 04:06:00 Configuration snooping in .env file (GET /.env.bak) 04:06:00 Configuration snooping in .env file (GET /.env.backup) 04:06:00 Configuration snooping in .env file (GET /.env.old) 04:06:00 Configuration snooping in .env file (GET /.env.save) 04:06:00 Configuration snooping in .env file (GET /.env.stage) show less	Hacking Web App Attack

Showing 1 to 15 of 303 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.178.37.29

🇸🇬 152.42.196.130

🇹🇼 61.219.232.138

🇬🇧 35.203.211.181

🇩🇪 209.38.234.169

🇮🇩 203.194.115.25

🇻🇳 103.90.227.203

🇩🇪 64.89.163.173

🇮🇹 2.157.70.255

🇨🇳 220.189.218.126

🇧🇷 205.210.31.162

🇲🇩 176.123.2.173

🇺🇸 103.74.178.206

🇫🇷 93.127.202.42

🇺🇸 64.62.156.97

🇫🇷 62.4.29.85

🇨🇳 58.242.86.239

🇺🇸 47.254.67.109

🇷🇴 2.57.121.112

🇩🇪 194.88.98.124