JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.31.239.128

144.31.239.128 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	SERV.HOST GROUP LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS207957
Domain Name	serv.host
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.31.239.128

Whois 144.31.239.128

IP Abuse Reports for 144.31.239.128:

This IP address has been reported a total of 26 times from 24 distinct sources. 144.31.239.128 was first reported on July 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MBombeck	2026-07-26 06:01:04 (1 day ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack
🇯🇵 pixelboost.kr	2026-07-25 08:33:15 (1 day ago)	144.31.239.128 - - [25/Jul/2026:17:33:14 +0900] "GET /api/v1/version HTTP/1.1" 444 0 "-" "Mozilla/5. ... show more 144.31.239.128 - - [25/Jul/2026:17:33:14 +0900] "GET /api/v1/version HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" ... show less	Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-07-25 01:01:43 (2 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 pixiekat	2026-07-25 00:14:27 (2 days ago)	[Sat Jul 25 00:14:23.972546 2026] [authz_core:error] [pid 444091:tid 444138] [client 144.31.239.128: ... show more [Sat Jul 25 00:14:23.972546 2026] [authz_core:error] [pid 444091:tid 444138] [client 144.31.239.128:43862] AH01630: client denied by server configuration: /var/www/html/api [Sat Jul 25 00:14:24.411450 2026] [authz_core:error] [pid 444089:tid 444099] [client 144.31.239.128:43868] AH01630: client denied by server configuration: /var/www/html/ [Sat Jul 25 00:14:25.512496 2026] [authz_core:error] [pid 444091:tid 444125] [client 144.31.239.128:43906] AH01630: client denied by server configuration: /var/www/html/users [Sat Jul 25 00:14:26.002661 2026] [authz_core:error] [pid 444091:tid 444120] [client 144.31.239.128:43914] AH01630: client denied by server configuration: /var/www/html/api [Sat Jul 25 00:14:27.137447 2026] [authz_core:error] [pid 444091:tid 444127] [client 144.31.239.128:43954] AH01630: client denied by server configuration: /var/www/html/ ... show less	Brute-Force
🇩🇪 Hugopvigo	2026-07-24 20:39:51 (2 days ago)	"2026-07-24 20:39:51+00:00 144.31.239.128 IP con score alto (100) detectada en el log."	Brute-Force SSH
🇩🇪 MBombeck	2026-07-24 13:31:50 (2 days ago)	Fail2Ban/traefik-botsearch on ops-01.bombeck.io: banned after 5 failures	Web App Attack
🇩🇪 lespbaj	2026-07-24 13:17:17 (2 days ago)	144.31.239.128 - - [24/Jul/2026:13:17:14 +0000] "GET /api/v1/version HTTP/1.1" 400 230 "-" "Mozilla/ ... show more 144.31.239.128 - - [24/Jul/2026:13:17:14 +0000] "GET /api/v1/version HTTP/1.1" 400 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 144.31.239.128 - - [24/Jul/2026:13:17:15 +0000] "GET / HTTP/1.1" 400 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 144.31.239.128 - - [24/Jul/2026:13:17:15 +0000] "GET /api/v1/version HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 144.31.239.128 - - [24/Jul/2026:13:17:15 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 144.31.239.128 - - [24/Jul/2026:13:17:16 +0000] "GET /users/sign_in HTTP/1.1" 400 230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" ... show less	Web App Attack
🇩🇪 ut-addicted.com	2026-07-24 12:03:43 (2 days ago)	\[24/Jul/2026:14:03:38 +0200\] amNUmgzh-Wnar2zTBgG4fAAAAMg 144.31.239.128 39250 78.46.187.162 443 \[ ... show more \[24/Jul/2026:14:03:38 +0200\] amNUmgzh-Wnar2zTBgG4fAAAAMg 144.31.239.128 39250 78.46.187.162 443 \[24/Jul/2026:14:03:39 +0200\] amNUmwzh-Wnar2zTBgG4fgAAAMQ 144.31.239.128 39264 78.46.187.162 443 \[24/Jul/2026:14:03:41 +0200\] amNUnQzh-Wnar2zTBgG4hAAAAM0 144.31.239.128 35818 78.46.187.162 443 show less	Brute-Force Web App Attack
🇩🇪 psauxit	2026-07-24 12:03:38 (2 days ago)	Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ... show more Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping show less	Web App Attack Hacking
🇫🇮 mnazibo	2026-07-24 11:00:27 (2 days ago)	Date: Jul 24 13:55:02 2026 EAT \| Reported IP: 144.31.239.128 mod_security \| id: 920350 953100 959100 ... show more Date: Jul 24 13:55:02 2026 EAT \| Reported IP: 144.31.239.128 mod_security \| id: 920350 953100 959100 \| FI/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); Host header is a numeric IP address; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); Host header is a numeric IP address; Host header is a numeric IP address; Host header is a numeric IP address; PHP Information Leakage; Outbound Anomaly Score Exceeded (Total Score: 4); Host header is a numeric IP address show less	SQL Injection Brute-Force Bad Web Bot
🇩🇪 LRob	2026-07-24 10:52:27 (2 days ago)	CrowdSec: crowdsecurity/http-probing \| req: \x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x039\xB2\xC9j\x ... show more CrowdSec: crowdsecurity/http-probing \| req: \x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x039\xB2\xC9j\x96=\x1DA\xE4I%\x86\xB7\x04\xB2\x01G\xC6\x9F\x1A\x00b\xF9KA\x83'\xEFb$<S \x1A\x06\x90\xFF5O\xD7\x1A5\xB3\xE8\xB6a\x08\xAF\xFC\xAD\x90}\xF2*\xB0?$\xAC>/\x13\xE3\xA6\xAA\xE3\x00$\x13\x02\x13\x03\x1 \| 11 distinct paths \| UA: - show less	Port Scan Web App Attack
Anonymous	2026-07-24 10:21:06 (2 days ago)	IP banned by Fail2Ban	Brute-Force SSH
Anonymous	2026-07-24 10:18:20 (2 days ago)	144.31.239.128 - - [24/Jul/2026:12:18:17 +0200] "GET /api/v1/version HTTP/1.1" 400 248 "-" "Mozilla/ ... show more 144.31.239.128 - - [24/Jul/2026:12:18:17 +0200] "GET /api/v1/version HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "-" 144.31.239.128 - - [24/Jul/2026:12:18:17 +0200] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "-" 144.31.239.128 - - [24/Jul/2026:12:18:19 +0200] "GET /users/sign_in HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" "-" ... show less	Hacking Web App Attack
🇩🇪 eryilmaz	2026-07-24 09:00:04 (2 days ago)	Automated attack blocked by eryilmaz WAF/defense engine (level 1, source: edge_auto, path: /)	Port Scan Hacking
🇫🇮 kumiko	2026-07-24 07:33:56 (3 days ago)	[2026-07-24 10:33:55] Probing for exploits [1 requests] "\x16\x03\x01\x02" 301	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.127.104

🇵🇰 202.69.42.10

🇻🇪 190.97.232.245

🇳🇱 176.65.148.93

🇭🇰 152.32.174.171

🇺🇸 66.132.172.16

🇵🇱 57.128.223.80

🇺🇸 35.252.182.43

🇰🇷 220.80.225.19

🇷🇺 176.113.88.138

🇺🇸 107.135.117.245

🇨🇦 104.223.84.233

🇧🇩 103.86.198.162

🇻🇳 103.3.244.107

🇫🇷 85.217.140.35

🇳🇱 77.239.124.241

🇬🇧 77.100.199.213

🇺🇸 66.132.172.251

🇺🇸 64.62.156.182

🇺🇸 64.62.156.66