JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.48.39.114

144.48.39.114 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 14%: ?

14%

ISP	Ransom_IT_Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136557
Domain Name	ransomit.com.au
Country	🇦🇺 Australia
City	Brisbane, Queensland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.48.39.114

Whois 144.48.39.114

IP Abuse Reports for 144.48.39.114:

This IP address has been reported a total of 70 times from 40 distinct sources. 144.48.39.114 was first reported on December 2nd 2020, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-06-23 04:54:15 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.verymobile.it:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-06-18 14:15:55 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.verymobile.it:443 show less	Open Proxy Port Scan
🇺🇸 Axel	2026-06-13 11:10:44 (1 month ago)	Blocked by UFW on LAXHH [56378/tcp] \| SPT: 8081 \| TTL: 48 \| LEN: 52 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [56378/tcp] \| SPT: 8081 \| TTL: 48 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-05-15 07:14:07 (2 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇺🇸 TPI-Abuse	2026-01-14 17:08:39 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 144.48.39.114 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 144.48.39.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 12:08:35.365010 2026] [security2:error] [pid 2673:tid 2673] [client 144.48.39.114:34841] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|breinesberger.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "breinesberger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aWfNk_QgakHntenspmyH6QAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-11 01:11:33 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 144.48.39.114 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 144.48.39.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 10 20:11:27.355287 2026] [security2:error] [pid 945:tid 975] [client 144.48.39.114:41699] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|marinkovich.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marinkovich.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aWL4v8J_T5vAsXagOt7pDQAAANU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 LotPhantom	2025-10-18 04:12:52 (8 months ago)	144.48.39.114 - - [18/Oct/2025:04:11:51 +0000] "GET / HTTP/1.1" 404 146 "-" "python-requests/2.32.3" ... show more 144.48.39.114 - - [18/Oct/2025:04:11:51 +0000] "GET / HTTP/1.1" 404 146 "-" "python-requests/2.32.3" "0" ... show less	Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-09-19 11:48:04 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇮🇩 BPS-StatisticsIndonesia	2025-09-14 13:54:31 (10 months ago)	XML RPC Scan Activities	Brute-Force Web App Attack
🇺🇸 mawan	2025-09-14 13:35:06 (10 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇨🇳 yangfan	2025-07-15 01:56:52 (1 year ago)	UFW Blocked [80/TCP] Source: 144.48.39.114:58384 TTL: 102 Lenth: 52 TOS: 0x00	Port Scan Web App Attack
🇦🇺 MAGIC	2025-07-04 01:09:51 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2025-06-24 00:13:27 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 BlueWire Hosting	2025-06-20 04:10:02 (1 year ago)	Detected as a bad bot	Bad Web Bot
🇦🇺 MAGIC	2025-06-12 07:06:26 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇿 41.188.181.78

🇨🇳 14.103.67.131

🇺🇸 207.90.244.12

🇹🇭 202.29.234.42

🇵🇱 176.53.159.198

🇩🇪 157.254.85.142

🇺🇸 107.173.144.114

🇮🇩 103.161.207.6

🇬🇧 35.203.211.147

🇨🇳 222.186.68.153

🇳🇱 192.42.116.116

🇺🇸 160.153.189.18

🇹🇷 94.154.43.230

🇬🇧 81.19.219.251

🇫🇷 81.17.98.147

🇱🇹 45.227.254.170

🇧🇷 45.163.200.34

🇬🇧 193.163.125.39

🇹🇭 183.88.226.97

🇰🇷 112.167.99.220