JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.239.12.102

23.239.12.102 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 13%: ?

13%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	scanners.hostedscan.com
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Cedar Knolls, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.239.12.102

Whois 23.239.12.102

IP Abuse Reports for 23.239.12.102:

This IP address has been reported a total of 25 times from 14 distinct sources. 23.239.12.102 was first reported on April 8th 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-06-27 18:53:21 (3 weeks ago)	179 requests with url.path */composer.json	Brute-Force Bad Web Bot
🇺🇸 nyt	2026-06-02 23:49:05 (1 month ago)	Empty UA + error	Web App Attack
🇳🇿 Antinson	2026-05-26 10:40:24 (1 month ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇳🇿 Antinson	2026-05-15 11:39:08 (2 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇫🇷 Duggy_Tuxy🧱	2026-05-13 19:02:07 (2 months ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Port Scan / Probing)	Port Scan
🇳🇿 Antinson	2026-03-16 10:19:55 (4 months ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2026-01-20 20:40:27 (5 months ago)	(mod_security) mod_security (id:210801) triggered by 23.239.12.102 (scanners.hostedscan.com): 1 in t ... show more (mod_security) mod_security (id:210801) triggered by 23.239.12.102 (scanners.hostedscan.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 15:39:59.411655 2026] [security2:error] [pid 8245:tid 8245] [client 23.239.12.102:41011] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "openvas" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|www.manaplas.com\|F\|2"] [data "mozilla/5.0 [en] (x11, u; openvas-vt 23.8.5)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "www.manaplas.com"] [uri "/"] [unique_id "aW_oH7-Dv__p09mO_-RBwAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2025-12-17 18:06:33 (7 months ago)	2.073 requests with url.path /.well-known/acme-challenge/.php 180 requests with url.path .php.b ... show more 2.073 requests with url.path /.well-known/acme-challenge/.php 180 requests with url.path .php.bak show less	Brute-Force Bad Web Bot
🇹🇷 rtbh.com.tr	2025-11-18 20:09:59 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2025-11-17 08:50:22 (8 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇧🇪 cmbplf	2025-10-25 23:03:24 (8 months ago)	22.611 requests in 1 hour (9h59m59s)	Brute-Force Bad Web Bot
🇩🇰 castipo	2025-10-10 16:43:48 (9 months ago)	portscan :: 23.239.12.102 - vps.[host]o.my.id "GET /\x5C\x5C\x5C\x5C\x5C\x5C%2e%2e%5c%2e%2e%5c%2e%2e ... show more portscan :: 23.239.12.102 - vps.[host]o.my.id "GET /\x5C\x5C\x5C\x5C\x5C\x5C%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cetc/passwd%23vt/test HTTP/1.1" 404 182 "-" "Mozilla/5.0 [en] (X11, U; OpenVAS-VT 23.8.5)" cfip=23.239.12.102 cfray=98c75e3ed9cc8cc0-EWR 23.239.12.102 - - [10/Oct/2025:23:06:26 +0700] "GET /\x5C\x5C\x5C\x5C\x5C\x5C%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cetc%2fpasswd%23vt/test HTTP/1.1" 404 182 "-" "Mozilla/5.0 [en] (X11, U; OpenVAS-VT 23.8.5)" 23.239.12.102 - vps.[host]o.my.id "GET /\x5C\x5C\x5C\x5C\x5C\x5C%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cetc%2fpasswd%23vt/test HTTP/1.1" 404 182 "-" "Mozilla/5.0 [en] (X11, U; OpenVAS-VT 23.8.5)" cfip=23.239.12.102 cfray=98c75e403c597ce4-EWR 23.239.12.102 - - [10/Oct/2025:23:06:26 +0700] "GET /\x5C\x5C\x5C\x5C\x5C\x5C%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cetc\x5Cpasswd%23vt/test HTTP/1.1" 404 182 "-" "Mozilla/5.0 [en] (X11, U; OpenVAS-VT 23.8.5)" 23.239.12.102 - vps.[host]o.my. show less	Port Scan
🇧🇪 cmbplf	2025-06-08 14:27:37 (1 year ago)	196 requests with url.path */composer.json	Brute-Force Bad Web Bot
Anonymous	2025-05-22 12:30:03 (1 year ago)	\| Multiple common web attacks from same source ip. (multiple servers)	Hacking SQL Injection Web App Attack
🇧🇪 cmbplf	2025-04-18 17:00:16 (1 year ago)	15.388 requests in 1 hour (1d15h59m)	Brute-Force Bad Web Bot

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.137

🇺🇸 154.6.8.182

🇫🇷 146.70.194.252

🇨🇳 106.12.86.201

🇧🇪 34.62.221.170

🇺🇸 20.65.195.96

🇺🇸 20.29.47.111

🇹🇼 198.235.24.76

🇺🇸 162.216.149.222

🇺🇸 98.37.96.113

🇧🇬 78.128.113.46

🇨🇳 60.185.230.170

🇻🇳 58.186.20.101

🇳🇱 45.153.34.167

🇮🇩 36.95.198.50

🇺🇸 172.104.5.12

🇨🇦 142.44.233.86

🇲🇴 125.31.4.70

🇭🇰 123.58.215.196

🇨🇳 116.179.32.114