AbuseIPDB » 172.239.103.201
172.239.103.201
This IP was reported 7 times. Confidence of
Abuse
is 44% : ?
ISP
Linode
Usage Type
Data Center/Web Hosting/Transit
ASN
AS63949
Domain Name
linode.com
Country
🇬🇧
United Kingdom of Great Britain and Northern Ireland
City
London, England
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 172.239.103.201 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
172.239.103.201 was first reported on
September 17th 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇧🇷
Host One
2026-09-17 07:50:59
(2 days ago)
[Honeypot] Malicious activity detected by honeypot on port 80. IP attempted unauthorized access to d ...
show more
[Honeypot] Malicious activity detected by honeypot on port 80. IP attempted unauthorized access to decoy service. Original message: Web honeypot: 5 malicious requests. Attack types: generic_scan. Sample: GET / HTTP/1.1. Attempted credentials captured.
show less
Brute-Force
Web App Attack
🇨🇦
smithoo4
2026-09-17 07:28:21
(2 days ago)
172.239.103.201 - - [17/Sep/2026:03:28:19 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xCF\x ...
show more
172.239.103.201 - - [17/Sep/2026:03:28:19 -0400] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xCF\x8F\x97\x86T\xB4i\x1C\xBB8i\xDFg\xDB\xEC0\xBD[\xA2\x1D.\xFC.\x1B\x832YO\xA5\xB7\xBAx \xBE\xE2b\xBA\xE4S8\xFF\xDE|w!>S4\x9A\xAEy\xD0\xF3=\xE0A\x0B*\xB7A\xED8\x07]&\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0'\x00g\xC0" 400 150 "-" "-"
172.239.103.201 - - [17/Sep/2026:03:28:19 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Port Scan
Bad Web Bot
🇵🇱
dzpk
2026-09-17 06:38:13
(2 days ago)
172.239.103.201 - - [17/Sep/2026:08:38:12 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xEF\x ...
show more
172.239.103.201 - - [17/Sep/2026:08:38:12 +0200] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xEF\xA8%`\xF9P\xE6m\xFEc\x9B\xFA\xDD9\xB0\xA8\xA8\xFA\xCCFZ6\xCA\x1ES'`\xDF\xBD\xB9\xE4\xD9 \xF3iS\x80,:\x19\x9D\xAD%\xC6\x8B\xE3\x8F\x98\xC3\xED\x99\x8AJ\xAC\xC9\x8C\xAE\x93\xE81\xE8\x0C\xD4\xC65\x00>\x13\x02\x13\x03\x13\x01\xC0,\xC00\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0+\xC0/\x00\x9E\xC0$\xC0(\x00k\xC0#\xC0'\x00g\xC0" 400 150 "-" "-"
show less
Web App Attack
🇩🇰
swrlly
2026-09-17 06:16:01
(2 days ago)
1 unauthorized webserver connection
Web App Attack
🇷🇺
DZBOT
2026-09-17 05:32:07
(2 days ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇵🇾
armandosaucedo.me
2026-09-17 05:25:13
(2 days ago)
Threat Intelligence via ARMTI, Web Attack: GET /
Web App Attack
2026-09-17 04:46:04
(2 days ago)
Probing for /www
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: