JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.233.28.142

172.233.28.142 was found in our database!

This IP was reported 324 times. Confidence of Abuse is 76%: ?

76%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	prod45client01.academyforinternetresearch.org
Domain Name	linode.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.233.28.142

Whois 172.233.28.142

IP Abuse Reports for 172.233.28.142:

This IP address has been reported a total of 324 times from 47 distinct sources. 172.233.28.142 was first reported on April 14th 2025, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 SSP	2026-06-12 16:15:17 (17 hours ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences: 46 Unique Ports: 194 Destination Ports: 8181, 2082, 1028, 2352, 9221, 8011, 3953, 5003, 3067, 9035, 1950, 38012, 27017, 2480, 8159, 4643, 2150, 3388, 3077, 3310, 4700, 636, 6653, 9011, 8442, 63033, 3084, 1650, 8415, 4999, 56016, 7, 6550, 4506, 161, 5853, 23424, 56094, 50028, 6005, 8049, 56 First Seen: 2026-06-11 16:10 UTC Last Seen: 2026-06-12 04:35 UTC show less	Port Scan
🇧🇷 SSP	2026-06-11 16:10:22 (1 day ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences: 93 Unique Ports: 158 Destination Ports: 8181, 2082, 1028, 2352, 9221, 8011, 3953, 5003, 3067, 9035, 1950, 38012, 27017, 2480, 8159, 4643, 2150, 3388, 3077, 3310, 4700, 636, 6653, 9011, 8442, 63033, 3084, 1650, 8415, 4999, 56016, 7, 6550, 4506, 161, 5853, 23424, 56094, 50028, 6005, 8049, 56 First Seen: 2026-06-10 16:05 UTC Last Seen: 2026-06-11 15:55 UTC show less	Port Scan
Anonymous	2026-06-11 01:06:15 (2 days ago)	Port Scan Attack.	Port Scan
🇧🇷 SSP	2026-06-10 16:05:27 (2 days ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences: 47 Unique Ports: 79 Destination Ports: 8181, 2082, 1028, 2352, 9221, 8011, 3953, 5003, 3067, 9035, 1950, 38012, 27017, 2480, 8159, 4643, 2150, 3388, 3077, 3310, 4700, 636, 6653, 9011, 8442, 63033, 3084, 1650, 8415, 4999, 56016, 7, 6550, 4506, 161, 5853, 23424, 56094, 50028, 6005, 8049, 56 First Seen: 2026-06-06 19:55 UTC Last Seen: 2026-06-10 16:05 UTC show less	Port Scan
🇧🇷 mateus.vicente	2026-06-10 01:30:06 (3 days ago)	[2026-06-10T01:30:06Z] Excessive 5xx requests from single IP detected and blocked. (db-srv)	DDoS Attack Web Spam Web App Attack
🇨🇱 SentinalX by uzumaru	2026-06-09 02:49:43 (4 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.google.com:80 show less	Open Proxy Port Scan
🇧🇷 ludarkstar99	2026-06-08 03:15:35 (5 days ago)	Blocked by os-abuseipdb; 2944 hits, proto=tcp, ports=100,1000,10000,10001,1010,1012,10134,102,1022,1 ... show more Blocked by os-abuseipdb; 2944 hits, proto=tcp, ports=100,1000,10000,10001,1010,1012,10134,102,1022,1023,1024,1024 show less	Port Scan Hacking
🇧🇷 W8C Dev	2026-06-07 21:39:11 (5 days ago)	Jun 7 18:39:09 vidsell sshd[3998005]: Invalid user omnxd from 172.233.28.142 port 52196 Jun 7 18:3 ... show more Jun 7 18:39:09 vidsell sshd[3998005]: Invalid user omnxd from 172.233.28.142 port 52196 Jun 7 18:39:10 vidsell sshd[3998014]: Unable to negotiate with 172.233.28.142 port 52366: no matching host key type found. Their offer: ssh-dss [preauth] ... show less	Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade	2026-06-07 09:42:09 (6 days ago)	2026-06-07T06:42:05.091963-03:00 dns1 sshd[25738]: error: kex_exchange_identification: Connection cl ... show more 2026-06-07T06:42:05.091963-03:00 dns1 sshd[25738]: error: kex_exchange_identification: Connection closed by remote host 2026-06-07T06:42:05.097571-03:00 dns1 sshd[25738]: Connection closed by 172.233.28.142 port 58850 2026-06-07T06:42:07.075189-03:00 dns1 sshd[25742]: Unable to negotiate with 172.233.28.142 port 32848: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] 2026-06-07T06:42:07.811509-03:00 dns1 sshd[25747]: Unable to negotiate with 172.233.28.142 port 32884: no matching host key type found. Their offer: ssh-dss [preauth] 2026-06-07T06:42:07.882899-03:00 dns1 sshd[25743]: Invalid user aqojd from 172.233.28.142 port 32864 show less	Brute-Force SSH
🇦🇷 Bruno	2026-06-07 07:35:17 (6 days ago)	Port Scanner: 172.233.28.142	Port Scan
Anonymous	2026-06-07 03:33:02 (6 days ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇩🇪 EnthecSolutions	2026-06-06 22:00:45 (6 days ago)	Detected by Enthec Solutions. \| Attempts: 876 in 24h \| Target port: 1024	Port Scan Hacking
🇧🇷 dominioz	2026-06-06 20:32:15 (6 days ago)	2026-06-06 20:31:36 POST /sdk - - 172.233.28.142 HTTP/1.1 Mozilla/5.0+(Android+9;+Mobile;+rv:141.0.0 ... show more 2026-06-06 20:31:36 POST /sdk - - 172.233.28.142 HTTP/1.1 Mozilla/5.0+(Android+9;+Mobile;+rv:141.0.0)+Gecko/141.0.0+Firefox/141.0.0 - 404 1459 2026-06-06 20:31:36 GET /default.asp - - 172.233.28.142 HTTP/1.1 Mozilla/5.0+(Android+9;+Mobile;+rv:141.0.0)+Gecko/141.0.0+Firefox/141.0.0 - 404 1459 2026-06-06 20:31:36 GET /nmaplowercheck1780777894 - - 172.233.28.142 HTTP/1.1 Mozilla/5.0+(Android+9;+Mobile;+rv:141.0.0)+Gecko/141.0.0+Firefox/141.0.0 - 404 1459 2026-06-06 20:31:36 GET /webui - - 172.233.28.142 HTTP/1.1 Mozilla/5.0+(Android+9;+Mobile;+rv:141.0.0)+Gecko/141.0.0+Firefox/141.0.0 - 404 1459 ... show less	Web App Attack
🇧🇷 SSP	2026-06-06 19:55:08 (6 days ago)	Automatically generated from firewall logs on Server_ID: SPPX01 Category: Port Scan Occurrences: 4 ... show more Automatically generated from firewall logs on Server_ID: SPPX01 Category: Port Scan Occurrences: 43 Unique Ports: 41 Destination Ports: 8181, 2082, 1028, 2352, 9221, 8011, 3953, 5003, 3067, 9035, 1950, 38012, 27017, 2480, 8159, 4643, 2150, 3388, 3077, 3310, 4700, 636, 6653, 9011, 8442, 63033, 3084, 1650, 8415, 4999, 56016, 7, 6550, 4506, 161, 5853, 23424, 56094, 50028, 6005, 8049 First Seen: 2026-06-06 18:55 UTC Last Seen: 2026-06-06 18:55 UTC show less	Port Scan
🇧🇷 W8C Dev	2026-06-06 16:23:18 (6 days ago)	Jun 6 13:23:18 vmori-manager-1 sshd[121883]: Unable to negotiate with 172.233.28.142 port 48050: no ... show more Jun 6 13:23:18 vmori-manager-1 sshd[121883]: Unable to negotiate with 172.233.28.142 port 48050: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 324 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 162.19.252.77

🇯🇵 133.117.72.24

🇮🇩 103.245.19.82

🇧🇩 103.86.198.162

🇺🇸 66.132.172.151

🇮🇶 37.239.98.200

🇬🇧 35.242.135.7

🇱🇰 220.247.224.226

🇰🇷 220.121.211.213

🇰🇪 197.248.207.139

🇪🇬 196.157.43.170

🇷🇺 176.118.22.128

🇺🇾 167.57.217.7

🇺🇸 154.197.57.71

🇮🇳 125.21.53.232

🇹🇭 122.154.235.21

🇻🇳 117.4.179.31

🇬🇧 82.38.244.118

🇺🇸 82.21.155.181

🇩🇪 43.228.157.9