JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.31.148.20

144.31.148.20 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 17%: ?

17%

ISP	VPSPay - vpspay.cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201988
Domain Name	vpspay.cloud
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.31.148.20

Whois 144.31.148.20

IP Abuse Reports for 144.31.148.20:

This IP address has been reported a total of 105 times from 75 distinct sources. 144.31.148.20 was first reported on April 5th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Aastha Jain	2026-05-17 19:54:25 (1 month ago)	CrowdSec: crowdsecurity/http-wordpress-scan 144.31.148.20 - - [15/May/2026:16:11:35 +0000] "GET /eva ... show more CrowdSec: crowdsecurity/http-wordpress-scan 144.31.148.20 - - [15/May/2026:16:11:35 +0000] "GET /eval HTTP/1.1" 404 35687 "-" "masscan/1.3 (https://github.com/robertdavidgraham/masscan)" 29 alerts in 11s \| Action: ban 4h show less	Web App Attack
🇨🇭 Gowtham A	2026-05-17 18:32:59 (1 month ago)	CrowdSec: crowdsecurity/http-crawl-non_statics 144.31.148.20 - - [16/May/2026:03:08:54 +0000] "GET / ... show more CrowdSec: crowdsecurity/http-crawl-non_statics 144.31.148.20 - - [16/May/2026:03:08:54 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 403 47414 "-" "python-requests/2.32.3" 27 alerts in 49s \| Action: ban 4h show less	Web App Attack
🇵🇹 darkabril	2026-05-17 00:45:32 (1 month ago)	ModSecurity: Access denied with code 403 (phase 2). [id "942100"] [msg "SQL Injection Attack Detecte ... show more ModSecurity: Access denied with code 403 (phase 2). [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [severity "CRITICAL"] [tag "OWASP_CRS/4.0"] [hostname "waf.cdn-edge.net"] [uri "/invoker/JMXInvokerServlet"] [unique_id "e5f923c383827aa0"] 144.31.148.20 - - [15/May/2026:22:10:06 +0000] "GET /invoker/JMXInvokerServlet HTTP/1.1" 403 245 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" show less	Hacking Web App Attack
🇷🇴 Victor Hernandez	2026-05-16 22:31:05 (1 month ago)	CrowdSec Detection: crowdsecurity/http-backdoors-attempts 144.31.148.20 - - [14/May/2026:17:36:14 +0 ... show more CrowdSec Detection: crowdsecurity/http-backdoors-attempts 144.31.148.20 - - [14/May/2026:17:36:14 +0000] "GET /v2/_catalog HTTP/1.1" 403 17222 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" 27 alerts in 36s. Decision: ban 4h show less	Web App Attack
🇮🇳 evicky2002	2026-04-30 13:04:10 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇧🇷 helix	2026-04-10 06:14:02 (2 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇩🇪 Elias Schreiner	2026-04-07 10:56:06 (2 months ago)	Reported by fail2ban SSH jail	Brute-Force SSH
Anonymous	2026-04-06 11:32:14 (2 months ago)	2026-04-06T13:32:11.635008 localhost.localdomain sshd[1960319]: pam_unix(sshd:auth): authentication ... show more 2026-04-06T13:32:11.635008 localhost.localdomain sshd[1960319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.31.148.20 2026-04-06T13:32:13.919919 localhost.localdomain sshd[1960319]: Failed password for invalid user ubuntu from 144.31.148.20 port 44492 ssh2 ... show less	Brute-Force SSH
🇬🇧 aug42	2026-04-06 11:31:20 (2 months ago)	2026-04-06T14:31:19.284414+03:00 nexus6 sshd[677356]: Invalid user ubuntu from 144.31.148.20 port 49 ... show more 2026-04-06T14:31:19.284414+03:00 nexus6 sshd[677356]: Invalid user ubuntu from 144.31.148.20 port 49810 ... show less	Brute-Force SSH
🇰🇷 ericshim.me	2026-04-06 11:09:15 (2 months ago)	Reported from fail2ban historical logs. (Detected at 2026-04-06 11:09:15)	Brute-Force SSH
🇰🇪 oh.mg	2026-04-06 10:55:51 (2 months ago)	2026-04-06T13:52:39.466533+03:00 deltachat.me sshd[1197359]: Failed password for root from 144.31.14 ... show more 2026-04-06T13:52:39.466533+03:00 deltachat.me sshd[1197359]: Failed password for root from 144.31.148.20 port 41262 ssh2 2026-04-06T13:54:14.429696+03:00 deltachat.me sshd[1204899]: Invalid user deploy from 144.31.148.20 port 49988 2026-04-06T13:54:14.433259+03:00 deltachat.me sshd[1204899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.31.148.20 2026-04-06T13:54:16.461997+03:00 deltachat.me sshd[1204899]: Failed password for invalid user deploy from 144.31.148.20 port 49988 ssh2 2026-04-06T13:55:50.704027+03:00 deltachat.me sshd[1212012]: Invalid user ubuntu from 144.31.148.20 port 60192 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-04-06 10:55:50 (2 months ago)	Apr 6 12:50:28 pbx-router-01.de.pbx-host.com sshd[3846613]: Disconnected from authenticating user r ... show more Apr 6 12:50:28 pbx-router-01.de.pbx-host.com sshd[3846613]: Disconnected from authenticating user root 144.31.148.20 port 39844 [preauth] Apr 6 12:52:36 pbx-router-01.de.pbx-host.com sshd[3847198]: Disconnected from authenticating user root 144.31.148.20 port 42156 [preauth] Apr 6 12:54:13 pbx-router-01.de.pbx-host.com sshd[3847682]: Invalid user deploy from 144.31.148.20 port 36518 Apr 6 12:54:13 pbx-router-01.de.pbx-host.com sshd[3847682]: Disconnected from invalid user deploy 144.31.148.20 port 36518 [preauth] Apr 6 12:55:49 pbx-router-01.de.pbx-host.com sshd[3848118]: Invalid user ubuntu from 144.31.148.20 port 56062 show less	Brute-Force
🇸🇮 NoaQT	2026-04-06 10:54:30 (2 months ago)	2026-04-06T12:51:13.774917+02:00 asdeby sshd-session[1840785]: Disconnected from authenticating user ... show more 2026-04-06T12:51:13.774917+02:00 asdeby sshd-session[1840785]: Disconnected from authenticating user root 144.31.148.20 port 50304 [preauth] 2026-04-06T12:52:52.395272+02:00 asdeby sshd-session[1842451]: Disconnected from authenticating user root 144.31.148.20 port 60436 [preauth] 2026-04-06T12:54:29.372776+02:00 asdeby sshd-session[1844185]: Invalid user deploy from 144.31.148.20 port 49000 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-04-06 10:53:41 (2 months ago)	Apr 6 04:52:05 jeeves sshd[162382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Apr 6 04:52:05 jeeves sshd[162382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.31.148.20 user=root Apr 6 04:52:07 jeeves sshd[162382]: Failed password for root from 144.31.148.20 port 50688 ssh2 Apr 6 04:53:40 jeeves sshd[162848]: Invalid user deploy from 144.31.148.20 port 45932 ... show less	Brute-Force SSH
🇫🇷 ImMarvolo	2026-04-06 09:57:19 (2 months ago)	Apr 6 09:57:19 eu-west-gra-01 sshd[254176]: Invalid user odoo from 144.31.148.20 port 41124 ...	Brute-Force SSH

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2401:4900:1cc9:8e81:c40b:48ec:490d:fa62

🇬🇧 185.216.145.164

🇧🇷 177.54.62.68

🇯🇵 153.185.130.141

🇨🇳 115.159.34.239

🇧🇩 103.185.25.116

🇺🇦 37.203.19.244

🇪🇸 213.194.156.206

🇰🇷 175.210.74.19

🇮🇪 146.70.189.193

🇻🇳 113.189.228.24

🇳🇱 84.26.13.8

🇨🇦 66.222.173.112

🇸🇳 41.82.50.218

🇵🇰 223.123.0.148

🇨🇴 190.252.187.144

🇮🇩 182.9.8.91

🇳🇱 178.85.4.199

🇯🇵 160.251.182.78

🇵🇭 157.20.143.74