144.48.39.126

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
42% Elevated
342 reports
101 reporters · latest 3 days ago
ISP
Ransom_IT_Infrastructure
Usage Type
Data Center/Web Hosting/Transit
ASN
AS136557
Domain Name
ransomit.com.au
Country
🇦🇺 Australia
City
Brisbane, Queensland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
342 from 101 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 32 🇲🇳 Mongolia 6 🇩🇪 Germany 2
Most common categories Hacking 26 Brute-Force 26 Port Scan 15 SSH 1 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇺 oncord
Form spam
Web Spam
🇪🇸 raiolanetworks.com
Honeypot detection: port scan / service probe. 26 events observed. Reported automatically from a honeypot sensor.
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (517 bytes of payload); 9443 [11] TCP
Port Scan
🇺🇸 sargetun
Honeypot: VNC probe on port 5900 at 2026-11-01 03:34:40.199297. Automated report from VPS honeypot.
Port Scan
🇺🇸 drewf.ink
[03:34] Attempted VNC authentication via legacy RFB 003.003 - challenge=60d8ed58f1478b20eb464bb20c8b47e3 response=8cf3e63b12fe6b56288d2d2acf605326
Hacking Brute-Force
🇺🇸 sargetun
Honeypot: VNC probe on port 5900 at 2026-10-30 12:24:04.499248. Automated report from VPS honeypot.
Port Scan
🇺🇸 drewf.ink
[12:24] Attempted VNC authentication via legacy RFB 003.003 - challenge=78638b486204b5bd90236863c3b1e5a3 response=2789c310a40e273967680d4795b9b90f
Hacking Brute-Force
🇺🇸 drewf.ink
[01:21] Attempted VNC authentication via legacy RFB 003.003 - challenge=fe1ed23cb0d8a52f250cb091441b3ef7 response=22d8219cdf4282e80ae76a40bc85f490
Hacking Brute-Force
🇺🇸 sargetun
Honeypot: VNC probe on port 5900 at 2026-10-20 19:24:52.895386. Automated report from VPS honeypot.
Port Scan
🇺🇸 drewf.ink
[19:23] Attempted VNC authentication via legacy RFB 003.003 - challenge=0e1a7d45b2815425f1a7c5b4710353c9 response=95d8e294fe71fcd1a0ad1c6aa5c9197c
Hacking Brute-Force
🇺🇸 drewf.ink
[20:49] Attempted VNC authentication via legacy RFB 003.003 - challenge=995978869da943cc677c7d28b5de592f response=5b52655ed284dfd3826e9ea42dd87795
Hacking Brute-Force
🇺🇸 drewf.ink
[20:31] Connected to VNC honeypot
Hacking Brute-Force
🇺🇸 drewf.ink
[20:30] Attempted VNC authentication via legacy RFB 003.003 - challenge=3b50c90e99c3695d522e242f189366f5 response=dc9aab192028ec3c1a0d79810e6ec74e
Hacking Brute-Force
🇩🇪 LRob
Shop search flood (L7 DDoS) | path: /33-meilleur-velo-entre-5000-et-10000-euros | query: resultsPerPage=99999&q=Type+de+v%C3%A9lo-%C3%89lectrique/Famille-Ransom | src_port: 43260
DDoS Attack Web App Attack
🇺🇸 drewf.ink
[00:21] Attempted VNC authentication via legacy RFB 003.003 - challenge=8618697fbf3b9e63c0057bf8af8a4cb9 response=69ba0094d9b087131624bb7e2fffaf1c
Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇾 181.117.184.159
🇨🇳 121.46.244.22
🇸🇪 83.233.255.240
🇷🇴 2.57.121.112
🇻🇪 201.234.238.174
🇺🇸 172.68.175.43
🇧🇷 138.94.165.150
🇻🇳 116.101.12.89
🇻🇳 113.173.4.26
🇷🇺 95.108.213.155
🇺🇸 52.188.196.139
🇳🇱 34.187.111.186
🇮🇱 34.165.181.181
🇧🇪 34.77.99.151
🇻🇳 222.252.248.34
🇺🇿 202.79.188.163
🇨🇴 190.67.106.221
🇸🇬 143.198.192.117
🇬🇧 109.94.208.203
🇸🇬 68.183.234.5
feedback