JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.31.213.158

144.31.213.158 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 58%: ?

58%

ISP	SERV.HOST GROUP LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS207957
Domain Name	serv.host
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.31.213.158

Whois 144.31.213.158

IP Abuse Reports for 144.31.213.158:

This IP address has been reported a total of 17 times from 12 distinct sources. 144.31.213.158 was first reported on September 27th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 vtchost.com	2026-10-21 23:12:32 (7 hours ago)	requested HTTP honeypot page - ignored robots.txt - bad crawler ...	Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-10-18 03:29:30 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 144.31.213.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 144.31.213.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:29:24.251183 2026] [security2:error] [pid 4350:tid 4350] [client 144.31.213.158:51316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proyectomanhattan.info"] [uri "/wp-config.php"] [unique_id "atQ9FLs9yIPE8Wt5PG6QEAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Michael McCarthy	2026-10-18 02:27:34 (4 days ago)		Web Spam
🇵🇱 Budyn	2026-10-16 19:57:30 (5 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.site \| URI: /wp-admin/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-16 00:37:23 (6 days ago)	Web page flood (L7) \| path: /, /agence, /audit (+4 more) \| 2026-10-16 00:37 UTC	DDoS Attack Web App Attack
🇵🇱 Budyn	2026-10-12 04:33:57 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.site \| URI: /wp-admin/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 expandmade.com	2026-10-10 23:27:18 (1 week ago)	trolling for installation vulnerabilities [10/Oct/2026:23:27:18 "GET /index.php/sobre-mi/"]	Web App Attack
Anonymous	2026-10-08 23:59:32 (1 week ago)	Banned by SPAMHAUS ASN-DROP list (ASN: 207957)	DDoS Attack Hacking Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-08 22:21:50 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT ... show more Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 \| 2026-10-08 22:21 UTC show less	Bad Web Bot
🇩🇪 Tamsy	2026-10-07 21:40:04 (2 weeks ago)	HTTPD - 4xx scan	Web App Attack
🇵🇱 Budyn	2026-10-07 04:03:55 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.space \| URI: /wp-admin/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-07 02:34:24 (2 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT ... show more Not following 301 redirects — wasted requests \| method: GET \| path: / \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 \| 2026-10-07 02:34 UTC show less	Bad Web Bot
🇺🇸 cyfordtechnologies.com	2026-10-06 04:44:55 (2 weeks ago)	Non-human high traffic: 8/7 : Reported by Cyford API	DDoS Attack
🇲🇽 octageeks.com	2026-09-30 04:06:26 (3 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇩🇪 LRob	2026-09-27 06:23:55 (3 weeks ago)	This address requests our sites over plain http, is answered with a redirect to https, and never fol ... show more This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. \| method: GET \| path: / \| 2026-09-27 06:23 UTC show less	Bad Web Bot

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇹 188.251.48.107

🇺🇸 180.149.15.63

🇬🇧 178.62.77.181

🇧🇷 177.172.67.177

🇩🇪 159.65.124.155

🇭🇰 154.92.17.128

🇺🇸 154.36.67.50

🇦🇺 122.201.72.234

🇫🇷 85.204.70.116

🇮🇱 46.210.119.226

🇦🇷 45.239.34.227

🇬🇧 35.203.211.102

🇧🇪 35.187.85.93

🇦🇹 172.68.50.205

🇺🇸 147.185.132.201

🇺🇸 147.90.234.13

🇺🇸 136.87.156.1

🇺🇸 119.12.186.92

🇩🇪 109.160.32.135

🇺🇸 104.165.235.145