JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.31.223.112

144.31.223.112 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 14%: ?

14%

ISP	VPSPay - vpspay.cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201988
Domain Name	vpspay.cloud
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.31.223.112

Whois 144.31.223.112

IP Abuse Reports for 144.31.223.112:

This IP address has been reported a total of 5 times from 5 distinct sources. 144.31.223.112 was first reported on March 2nd 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 Tio Axellino	2026-05-17 20:11:41 (1 month ago)	Fail2Ban (apache-auth): Ban 144.31.223.112 144.31.223.112 - - [15/May/2026:03:48:24 +0000] "GET /db. ... show more Fail2Ban (apache-auth): Ban 144.31.223.112 144.31.223.112 - - [15/May/2026:03:48:24 +0000] "GET /db.sql HTTP/1.1" 401 41866 [error] [client 144.31.223.112] File does not exist: /db.sql show less	Web App Attack
🇺🇸 darkabril	2026-05-17 18:27:52 (1 month ago)	ModSecurity: Access denied with code 403 (phase 2). [id "913100"] [msg "Found User-Agent associated ... show more ModSecurity: Access denied with code 403 (phase 2). [id "913100"] [msg "Found User-Agent associated with security scanner"] [severity "WARNING"] [tag "OWASP_CRS/4.0"] [hostname "waf.cdn-edge.net"] [uri "/server-status"] [unique_id "8e243f297ef0c68d"] 144.31.223.112 - - [16/May/2026:12:39:14 +0000] "GET /server-status HTTP/1.1" 403 1784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" show less	Hacking Web App Attack
🇺🇸 ThreatIq	2026-05-17 01:03:49 (1 month ago)	CrowdSec: crowdsecurity/ssh-slow-bf 132 failures in 114s sshd[40999]: Failed password for postgres f ... show more CrowdSec: crowdsecurity/ssh-slow-bf 132 failures in 114s sshd[40999]: Failed password for postgres from 144.31.223.112 port 33676 ssh2 sshd[29595]: Failed password for invalid user minecraft from 144.31.223.112 port 62340 ssh2 Action: ban 4h \| 14/May/2026:22:13:44 +0000 show less	Brute-Force SSH
🇷🇴 Adar P	2026-05-16 22:34:06 (1 month ago)	ModSecurity: Access denied with code 403 (phase 2). [id "930110"] [msg "Path Traversal Attack (/../) ... show more ModSecurity: Access denied with code 403 (phase 2). [id "930110"] [msg "Path Traversal Attack (/../)"] [severity "CRITICAL"] [tag "OWASP_CRS"] [ver "OWASP_CRS/4.0.0"] 144.31.223.112 - - [15/May/2026:08:11:27 +0000] "GET /ecp/default.aspx HTTP/1.1" 403 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" Unique ID: c8be295a show less	Hacking Web App Attack
🇫🇷 tavis.page	2026-03-02 02:32:37 (3 months ago)	Blocked by UFW on server [3128/tcp] Source port: 64371 TTL: 117 Packet length: 52 TOS: 0x00 This re ... show more Blocked by UFW on server [3128/tcp] Source port: 64371 TTL: 117 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇿 105.96.13.6

🇺🇸 104.28.215.150

🇳🇱 91.92.42.147

🇱🇻 81.30.98.144

🇮🇳 49.206.201.253

🇳🇱 45.148.10.141

🇫🇷 37.208.52.18

🇨🇱 216.155.93.75

🇬🇪 212.58.114.195

🇷🇴 193.32.162.84

🇨🇳 42.178.17.143

🇨🇳 183.225.127.249

🇺🇸 173.255.223.62

🇺🇸 165.227.188.42

🇨🇳 124.221.227.154

🇺🇸 104.164.173.38

🇺🇸 91.230.168.214

🇧🇷 45.205.1.244

🇳🇱 45.148.10.151

🇰🇷 211.223.107.86