This IP address has been reported a total of
103
times from
86 distinct
sources.
144.172.96.139 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
144.172.96.139 - - [13/Jun/2026:04:34:32 +0200] "GET /.env HTTP/1.1" 403 519 "-" "Mozilla/5.0 (X11; ...
show more144.172.96.139 - - [13/Jun/2026:04:34:32 +0200] "GET /.env HTTP/1.1" 403 519 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0"
...
show less
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ...
show moreWeb application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received).
show less
HONEYPOT HIT --> Fail2ban time=1781293120 log=2026-06-12T20:38:40+01:00 ip=144.172.96.139 host=89.39 ...
show moreHONEYPOT HIT --> Fail2ban time=1781293120 log=2026-06-12T20:38:40+01:00 ip=144.172.96.139 host=89.39.211.7 method=GET uri="/.env" status=404 ua="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" ref="-" rid=697a66ad5f36b80c72f36b39540eb366
show less
144.172.96.139 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 144.172.96.139 (US/United States/139.96 ...
show more(mod_security) mod_security triggered on hostname [redacted] 144.172.96.139 (US/United States/139.96.172.144.static.cloudzy.com): (CF_ENABLE)
show less