JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.31.53.213

144.31.53.213 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 15%: ?

15%

ISP	VPSPay - vpspay.cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201988
Domain Name	vpspay.cloud
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.31.53.213

Whois 144.31.53.213

IP Abuse Reports for 144.31.53.213:

This IP address has been reported a total of 5 times from 5 distinct sources. 144.31.53.213 was first reported on February 22nd 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Hermann KEKE	2026-05-17 19:26:12 (1 month ago)	CrowdSec: crowdsecurity/tcp-scan 144.31.53.213 scanned 197 ports on 10.13.15.52 in 21s Top targeted: ... show more CrowdSec: crowdsecurity/tcp-scan 144.31.53.213 scanned 197 ports on 10.13.15.52 in 21s Top targeted: 5432, 139, 443, 3389, 80, 22 Decision: ban 24h \| 15/May/2026:11:38:55 +0000 show less	Port Scan
🇫🇷 Papa Yaw	2026-05-17 19:13:49 (1 month ago)	OSSEC HIDS Alert: Rule 31120 fired (level 7) - "Web scanner/vulnerability assessment detected" Src I ... show more OSSEC HIDS Alert: Rule 31120 fired (level 7) - "Web scanner/vulnerability assessment detected" Src IP: 144.31.53.213 144.31.53.213 - - [16/May/2026:23:14:57 +0000] "GET /dump.sql HTTP/1.1" 400 4419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" show less	Web App Attack
🇦🇹 Nitin Shukla	2026-05-17 01:49:17 (1 month ago)	[] [1:2034647:3] ET EXPLOIT Apache Log4j RCE Attempt inbound [] [Classification: Attempted Infor ... show more [] [1:2034647:3] ET EXPLOIT Apache Log4j RCE Attempt inbound [] [Classification: Attempted Information Leak] [Priority: 2] 15/May/2026:22:28:56 +0000 {TCP} 144.31.53.213:43697 -> 10.120.170.51:80 show less	Hacking Web App Attack
🇷🇴 soham bhore	2026-05-16 22:29:49 (1 month ago)	[] [1:2027369:3] ET EXPLOIT Possible Spring4Shell [] [Classification: Attempted Information Leak ... show more [] [1:2027369:3] ET EXPLOIT Possible Spring4Shell [] [Classification: Attempted Information Leak] [Priority: 2] 15/May/2026:16:05:25 +0000 {TCP} 144.31.53.213:56206 -> 10.117.28.8:5432 show less	Hacking
🇫🇷 tilellit.pro	2026-02-22 21:09:36 (3 months ago)	Fail2Ban banned 144.31.53.213 for security violations in jail wp-armour. Log: 2026/02/22 21:09:35 [e ... show more Fail2Ban banned 144.31.53.213 for security violations in jail wp-armour. Log: 2026/02/22 21:09:35 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 144.31.53.213 \| Target: wplogin" , client: 144.31.53.213, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.149

🇬🇧 159.65.91.36

🇸🇬 118.26.111.107

🇮🇳 117.205.42.184

🇭🇰 114.111.53.214

🇺🇸 66.132.195.100

🇺🇸 192.111.134.12

🇮🇩 182.9.161.235

🇪🇸 139.28.190.220

🇩🇪 63.250.60.197

🇮🇳 13.71.92.229

🇹🇼 198.235.24.57

🇺🇸 154.6.110.30

🇳🇱 45.142.193.35

🇨🇳 14.103.117.97

🇬🇧 198.244.240.65

🇻🇳 180.93.172.213

🇺🇸 172.245.106.140

🇳🇱 158.173.20.90

🇨🇳 120.211.158.107