JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.31.148.189

144.31.148.189 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 14%: ?

14%

ISP	VPSPay - vpspay.cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201988
Domain Name	vpspay.cloud
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.31.148.189

Whois 144.31.148.189

IP Abuse Reports for 144.31.148.189:

This IP address has been reported a total of 4 times from 4 distinct sources. 144.31.148.189 was first reported on May 16th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 Vinh Nguyen	2026-05-17 19:49:20 (1 month ago)	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "941100"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.148.189 - - [15/May/2026:00:13:36 +0000] "GET /config.php HTTP/1.1" 403 1409 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇬🇧 kp_5036	2026-05-17 19:23:13 (1 month ago)	Fail2Ban (nginx-badbots): Ban 144.31.148.189 144.31.148.189 - - [15/May/2026:05:01:20 +0000] "HEAD / ... show more Fail2Ban (nginx-badbots): Ban 144.31.148.189 144.31.148.189 - - [15/May/2026:05:01:20 +0000] "HEAD /wp-content/debug.log HTTP/1.1" 400 57035 "-" "python-requests/2.32.3" Hits: 16 in 6s show less	Web App Attack
🇹🇷 H F	2026-05-17 00:56:40 (1 month ago)	Suricata EVE alert: {"timestamp":"16/May/2026:11:34:37 +0000","src_ip":"144.31.148.189","src_port":4 ... show more Suricata EVE alert: {"timestamp":"16/May/2026:11:34:37 +0000","src_ip":"144.31.148.189","src_port":46771,"dest_ip":"10.188.222.9","dest_port":22,"proto":"TCP","alert":{"signature_id":2001219,"signature":"ET SCAN Potential SSH Scan","category":"Attempted Information Leak","severity":2,"action":"blocked"}} show less	Port Scan
🇷🇴 Adar P	2026-05-16 22:21:51 (1 month ago)	ModSecurity: Access denied with code 403 (phase 2). [id "932100"] [msg "Remote Command Execution: Un ... show more ModSecurity: Access denied with code 403 (phase 2). [id "932100"] [msg "Remote Command Execution: Unix Command Injection"] [severity "CRITICAL"] [tag "OWASP_CRS"] [ver "OWASP_CRS/4.0.0"] 144.31.148.189 - - [15/May/2026:02:32:47 +0000] "GET /wp-login.php HTTP/1.1" 403 1439 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" Unique ID: 836613f6 show less	Hacking Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.192.81.11

🇨🇳 129.204.171.232

🇺🇸 64.77.244.139

🇭🇺 62.165.213.238

🇸🇬 52.237.80.79

🇬🇧 193.163.125.19

🇧🇷 189.93.241.32

🇳🇱 185.242.226.59

🇨🇳 153.0.32.118

🇺🇸 152.32.183.236

🇩🇪 147.90.209.136

🇵🇭 114.198.138.124

🇺🇦 91.211.90.169

🇺🇸 66.219.121.200

🇺🇸 50.33.235.162

🇯🇵 20.153.204.5

🇦🇷 181.44.12.48

🇮🇳 163.61.39.124

🇺🇸 162.216.150.39

🇦🇺 124.171.221.1