AbuseIPDB » 144.31.148.59
144.31.148.59 was found in our database!
This IP was reported 4 times. Confidence of
Abuse
is 0% : ?
ISP
VPSPay - vpspay.cloud
Usage Type
Data Center/Web Hosting/Transit
ASN
AS201988
Hostname(s)
144-31-148-59.rdns.vpspay.net
Domain Name
vpspay.cloud
Country
๐ฉ๐ช
Germany
City
Frankfurt am Main, Hesse
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 144.31.148.59 :
This IP address has been reported a total of
4
times from
4 distinct
sources.
144.31.148.59 was first reported on
May 16th 2026 , and the most recent report was
4 months ago .
Old Reports:
The most recent abuse report for this IP address is from
4 months ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ต๐น
Brian Liu
2026-05-17 19:37:33
(4 months ago)
CrowdSec: crowdsecurity/ssh-bf
146 failures in 269s
sshd[23994]: Failed password for gitlab from 144 ...
show more
CrowdSec: crowdsecurity/ssh-bf
146 failures in 269s
sshd[23994]: Failed password for gitlab from 144.31.148.59 port 35019 ssh2
sshd[51072]: Failed password for invalid user ubuntu from 144.31.148.59 port 43537 ssh2
Action: ban 4h | 16/May/2026:01:26:47 +0000
show less
Brute-Force
SSH
๐ฑ๐ป
Timur Catakli
2026-05-17 18:57:28
(4 months ago)
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.148.59 - - [16/May/2026:11:24:35 +0000] "GET / ...
show more
CrowdSec: crowdsecurity/http-crawl-non_statics
144.31.148.59 - - [16/May/2026:11:24:35 +0000] "GET /.aws/credentials HTTP/1.1" 404 17512 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
29 alerts in 33s | Action: ban 4h
show less
Web App Attack
๐ธ๐ฎ
baz smh
2026-05-17 01:34:25
(4 months ago)
ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select|union|insert|update|delet ...
show more
ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select|union|insert|update|delete|drop|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "920350"] [msg "IP address found in Host header"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"]
144.31.148.59 - - [16/May/2026:12:46:56 +0000] "GET /wp-config.php~ HTTP/1.1" 403 735 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
show less
Hacking
Web App Attack
๐ท๐ด
Adar P
2026-05-16 22:25:26
(4 months ago)
ModSecurity: Access denied with code 403 (phase 2). [id "949110"] [msg "Inbound Anomaly Score Exceed ...
show more
ModSecurity: Access denied with code 403 (phase 2). [id "949110"] [msg "Inbound Anomaly Score Exceeded"] [severity "CRITICAL"] [tag "OWASP_CRS"] [ver "OWASP_CRS/4.0.0"]
144.31.148.59 - - [15/May/2026:07:35:44 +0000] "GET /debug/pprof/ HTTP/1.1" 403 1848 "-" "python-requests/2.31.0"
Unique ID: 30573bf3
show less
Web App Attack
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: