172.239.111.154

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
35% Elevated
38 reports
27 reporters · latest 1 month ago
ISP
Linode
Usage Type
Data Center/Web Hosting/Transit
ASN
AS63949
Hostname(s)
172-239-111-154.ip.linodeusercontent.com
Domain Name
linode.com
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
London, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
38 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 9 🇫🇷 France 3 🇬🇧 United Kingdom of Great Britain and Northern Ireland 3
Most common categories Port Scan 22 Hacking 7 Web App Attack 2 Email Spam 1 Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Drop from IP address 172.239.111.154 to tcp-port 443
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=55743 dstport=443
Port Scan
🇬🇧 Nov
Unauthorized access attempt (tcp/443)
Port Scan
🇭🇰 CyberFox
443/tcp (1 or more attempts)
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=56962 dstport=80
Port Scan
🇫🇷 vtchost.com
portscan 80/443 on honeypot system ...
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=40806 dstport=443
Port Scan
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 47 | Len: 52B | Win: 65535(1) | rDNS: 172-239-111-154.ip.linodeusercontent.com | F2B/ufw-honeypot@2026-10-01T04:24:56Z
Port Scan Hacking
Anonymous
unsolicited connect TCP dport 443 (sport 47567)
Hacking
🇧🇷 Host One
T-Pot Honeypot alert: 5 malicious events (exploit_attempt, port_scan) detected.
Port Scan Hacking
🇬🇧 Andrew
Blocked by UFW (TCP on port 443). Source port: 34615 TTL: 54 Packet length: 52 TOS: 0x00 This report (for 172.239.111.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Web App Attack
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=60991 dstport=80
Port Scan
🇫🇷 EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Web Attack)
Hacking Web App Attack Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇳🇱 StopAbuse
tcp/443
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 123.245.85.25
🇮🇳 103.62.238.130
🇬🇧 81.19.219.227
🇰🇷 220.78.85.92
🇩🇪 194.61.112.82
🇧🇷 190.115.84.25
🇨🇳 124.174.14.174
🇺🇸 103.143.231.24
🇬🇧 87.236.176.226
🇺🇸 87.87.150.227
🇺🇸 66.132.186.211
🇮🇳 66.116.225.71
🇨🇳 49.235.156.121
🇨🇳 222.191.243.91
🇪🇸 212.227.50.229
🇨🇴 181.53.87.31
feedback