103.214.20.140
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Ransom IT Trust
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS136557
- Domain Name
- ransomit.com.au
- Country
- 🇦🇺 Australia
- City
- Adelaide, South Australia
Abuse Reports
Total reports
92 from
65 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 Halux |
103.214.20.140 Probing protected path or service
|
Web App Attack | |
| 🇩🇪 pltcldvlpr |
|
Web App Attack | |
| 🇫🇷 pm33 |
Probing for resource vulnerabilities HTTP(S)
|
Web App Attack | |
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Web Attack)
|
Hacking Port Scan Web App Attack | |
| 🇩🇪 HoneyPotFRI |
103.214.20.140 [redacted] (136557-Host Universal Pty Ltd Australia Adelaide) - - [09/Nov/2026:07:41:11 +0100] "GET /.env HTTP/1.1" 404 187 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KH
...
|
Bad Web Bot Web App Attack | |
| 🇩🇪 Michel Wijnberg |
103.214.20.140 - - [09/Nov/2026:05:51:49 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
|
Bad Web Bot Web App Attack | |
| 🇩🇪 Teufel100 |
ModSecurity rejected a query
|
Brute-Force Hacking Web App Attack | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /sendgrid/.env | seen at 2026-11-09 05:44:52.798 |
|
Web App Attack | |
| 🇬🇧 knock |
Knock-Knock honeypot brute-force: HTTP (4 total hits)
|
Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 4 application-level events across 4 source port(s). Sensor(s): Tanner.
|
Port Scan | |
| Anonymous |
Unauthorized SSH login attempts
|
Brute-Force SSH | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /sendgrid/.env | seen at 2026-11-09 03:32:07.780 |
|
Web App Attack | |
| 🇩🇪 Grossmann-Gruppe |
Plesk Fail2Ban: plesk-modsecurity
|
Hacking Brute-Force | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.env | seen at 2026-11-09 02:24:51.752 |
|
Web App Attack | |
| 🇩🇪 Progetto1 |
Detected via HAProxyScanner at 2026-11-09 02:11:01 UTC on destination port WEB (80/443). Repeated scan / connection.
|
Port Scan Hacking Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown