JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.31.148.161

144.31.148.161 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 16%: ?

16%

ISP	VPSPay - vpspay.cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201988
Domain Name	vpspay.cloud
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.31.148.161

Whois 144.31.148.161

IP Abuse Reports for 144.31.148.161:

This IP address has been reported a total of 4 times from 4 distinct sources. 144.31.148.161 was first reported on May 16th 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Nitin Shukla	2026-05-17 20:05:02 (4 weeks ago)	[] [1:2024792:3] ET EXPLOIT Apache Struts Remote Code Execution [] [Classification: Attempted In ... show more [] [1:2024792:3] ET EXPLOIT Apache Struts Remote Code Execution [] [Classification: Attempted Information Leak] [Priority: 2] 16/May/2026:06:41:12 +0000 {TCP} 144.31.148.161:34320 -> 10.7.240.200:8443 show less	Hacking
🇱🇻 Jashuva P	2026-05-17 19:03:03 (4 weeks ago)	[] [1:2002911:3] ET SCAN Potential VNC Scan 5900-5920 [] [Classification: Attempted Information ... show more [] [1:2002911:3] ET SCAN Potential VNC Scan 5900-5920 [] [Classification: Attempted Information Leak] [Priority: 2] 15/May/2026:05:53:05 +0000 {TCP} 144.31.148.161:47222 -> 10.183.122.35:3389 show less	Port Scan
🇺🇸 Victor Hernandez	2026-05-17 01:08:03 (4 weeks ago)	Fail2Ban (traefik-auth): Ban 144.31.148.161 after 32 failures 144.31.148.161 - - [14/May/2026:10:14: ... show more Fail2Ban (traefik-auth): Ban 144.31.148.161 after 32 failures 144.31.148.161 - - [14/May/2026:10:14:29 +0000] "GET /db.sql HTTP/1.1" 404 4937 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 144.31.148.161 - - [14/May/2026:10:14:29 +0000] "GET /wp-config.php.bak HTTP/1.1" 404 10639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Web App Attack
🇷🇴 Adar P	2026-05-16 22:31:07 (4 weeks ago)	ModSecurity: Access denied with code 403 (phase 2). [id "913100"] [msg "Found User-Agent associated ... show more ModSecurity: Access denied with code 403 (phase 2). [id "913100"] [msg "Found User-Agent associated with security scanner"] [severity "CRITICAL"] [tag "OWASP_CRS"] [ver "OWASP_CRS/4.0.0"] 144.31.148.161 - - [16/May/2026:17:47:50 +0000] "GET /config.php HTTP/1.1" 403 227 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" Unique ID: d1314075 show less	Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.131.42.12

🇧🇴 181.188.148.74

🇺🇸 156.229.162.14

🇫🇮 147.185.133.172

🇭🇰 103.158.116.82

🇷🇺 95.165.159.70

🇨🇦 54.39.132.34

🇭🇰 47.239.144.86

🇰🇷 211.219.243.53

🇺🇸 198.46.253.100

🇺🇸 192.186.133.40

🇭🇰 154.83.85.228

🇨🇦 104.255.152.18

🇮🇷 94.101.184.110

🇳🇱 91.92.42.227

🇩🇪 43.228.157.9

🇺🇸 35.203.190.154

🇺🇸 20.65.195.126

🇯🇵 8.216.5.52

🇭🇰 220.246.42.212