JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.31.53.50

144.31.53.50 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 18%: ?

18%

ISP	VPSPay - vpspay.cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201988
Domain Name	vpspay.cloud
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.31.53.50

Whois 144.31.53.50

IP Abuse Reports for 144.31.53.50:

This IP address has been reported a total of 5 times from 5 distinct sources. 144.31.53.50 was first reported on May 16th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Vinh Nguyen	2026-05-17 19:26:10 (3 weeks ago)	ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delet ... show more ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i:(?:select\|union\|insert\|update\|delete\|drop\|alter))' against variable `ARGS:id' [file "/etc/nginx/modsec/crs/rules.conf"] [line "1234"] [id "941100"] [msg "XSS Attack Detected via libinjection"] [data "Matched Data"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0"] [maturity "5"] [accuracy "5"] 144.31.53.50 - - [14/May/2026:03:59:20 +0000] "GET /xmlrpc.php HTTP/1.1" 403 1959 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 dsdsd	2026-05-17 19:25:40 (3 weeks ago)	iptables DROP: IN=eth0 OUT= SRC=144.31.53.50 DST=10.170.72.192 LEN=43 TOS=0x00 PREC=0x00 TTL=75 ID=6 ... show more iptables DROP: IN=eth0 OUT= SRC=144.31.53.50 DST=10.170.72.192 LEN=43 TOS=0x00 PREC=0x00 TTL=75 ID=61315 DF PROTO=TCP SPT=53883 DPT=5900 WINDOW=40067 RES=0x00 SYN URGP=0 74 hits from 144.31.53.50 in last 35 minutes targeting port 5900 show less	Port Scan
🇨🇦 Sahindu Gayanuka	2026-05-17 01:29:28 (4 weeks ago)	lfd on server.example.com: Blocked 144.31.53.50 (DE/Germany/-) [LF_SSHD] - 23 failed SSH login att ... show more lfd on server.example.com: Blocked 144.31.53.50 (DE/Germany/-) [LF_SSHD] - 23 failed SSH login attempts from 144.31.53.50 Last: sshd[31310]: Failed password for user from 144.31.53.50 port 57429 ssh2 14/May/2026:07:57:02 +0000 show less	Brute-Force SSH
🇷🇴 kp_5036	2026-05-16 22:20:33 (4 weeks ago)	CrowdSec Detection: crowdsecurity/ssh-bf 194 failed auth in 73s sshd[55826]: Failed password for adm ... show more CrowdSec Detection: crowdsecurity/ssh-bf 194 failed auth in 73s sshd[55826]: Failed password for admin from 144.31.53.50 port 41581 ssh2 sshd[55829]: Failed password for invalid user ftpuser from 144.31.53.50 port 41585 ssh2 Decision: ban 4h at 14/May/2026:16:13:08 +0000 show less	Brute-Force SSH
🇷🇴 soham bhore	2026-05-16 22:12:40 (4 weeks ago)	Automated SSH login attempts detected from this IP using credential stuffing.	Brute-Force SSH

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.110.147.58

🇺🇸 208.84.100.28

🇬🇧 193.163.125.180

🇺🇸 216.25.89.109

🇳🇱 213.177.179.62

🇮🇳 182.95.187.22

🇰🇷 180.71.9.31

🇳🇱 176.65.148.44

🇻🇳 171.231.196.215

🇮🇳 154.61.69.74

🇸🇬 146.190.83.75

🇰🇷 125.130.249.158

🇨🇳 120.48.15.138

🇸🇬 103.187.146.33

🇩🇪 94.26.106.147

🇳🇱 91.92.40.4

🇷🇴 80.94.92.102

🇷🇴 80.94.92.28

🇮🇷 78.109.200.147

🇺🇸 66.249.79.129