JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.237.54.196

172.237.54.196 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 63%: ?

63%

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	172-237-54-196.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 172.237.54.196

Whois 172.237.54.196

IP Abuse Reports for 172.237.54.196:

This IP address has been reported a total of 135 times from 21 distinct sources. 172.237.54.196 was first reported on February 26th 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 diego	2026-06-21 16:10:47 (11 minutes ago)	[rede-164-29] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeuserconten ... show more [rede-164-29] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeusercontent.com). 11 hits in the last 290 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 21 13:10:41 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=44209 DF PROTO=TCP SPT=58006 DPT=6503 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 21 13:10:41 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=2075 DF PROTO=TCP SPT=35792 DPT=6262 WINDOW=64240 RES=0x00 SYN U show less	Port Scan
🇧🇷 diego	2026-06-21 11:45:25 (4 hours ago)	[rede-164-29] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeuserconten ... show more [rede-164-29] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeusercontent.com). 11 hits in the last 286 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 21 08:45:10 kernel: [11237053.528617] Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=52751 DF PROTO=TCP SPT=33434 DPT=8013 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 21 08:45:10 kernel: [11237053.528715] Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=51846 DF PROTO=TCP SPT=44232 show less	Port Scan
🇧🇷 SSP	2026-06-21 04:55:41 (11 hours ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: Port Scan Occurrences: 50 Unique Ports: 51 Destination Ports: , 3059, 8118, 777, 44818, 8222, 22, 5602, 8025, 8880, 7500, 8005, 9090, 2455, 2003, 8814, 547, 56016, 9000, 7654, 2062, 56036, 56078, 3780, 514, 8843, 56003, 2126, 8053, 9300, 9303, 39278, 55555, 56027, 2559, 22222, 20000, 56079, 3057, 13783, 3098, 3 First Seen: 2026-06-18 20:45 UTC Last Seen: 2026-06-21 04:55 UTC show less	Port Scan
Anonymous	2026-06-21 04:18:39 (12 hours ago)	Port scan and brute force attack	Port Scan Brute-Force
🇧🇷 diego	2026-06-21 03:35:24 (12 hours ago)	[rede-164-29] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeuserconten ... show more [rede-164-29] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeusercontent.com). 11 hits in the last 15 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 21 00:35:03 kernel: [19155485.753225] Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=63415 DF PROTO=TCP SPT=39516 DPT=8875 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 21 00:35:05 kernel: [19155487.750986] Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=65254 DF PROTO=TCP SPT=33030 show less	Port Scan
🇧🇷 dominioz	2026-06-20 21:56:12 (18 hours ago)	2026-06-20 21:55:52 POST /sdk - - 172.237.54.196 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+14_6+li ... show more 2026-06-20 21:55:52 POST /sdk - - 172.237.54.196 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+14_6+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML - 404 1459 2026-06-20 21:55:52 GET /human.aspx arg12=infotech - 172.237.54.196 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+14_6+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML - 404 2196 2026-06-20 21:55:52 GET /dana-na/nc/nc_gina_ver.txt - - 172.237.54.196 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+14_6+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML - 404 1459 2026-06-20 21:55:52 GET /user - - 172.237.54.196 HTTP/1.1 Mozilla/5.0+(iPhone;+CPU+iPhone+OS+14_6+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML - 404 1459 ... show less	Web App Attack
🇧🇷 Peregrine	2026-06-20 09:16:31 (1 day ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: - 172.237.54.196 - - [20/Jun/2026:06:16:20 -0300] "GET /c ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: - 172.237.54.196 - - [20/Jun/2026:06:16:20 -0300] "GET /cgi-bin/info.cgi HTTP/1.1" 404 414 - 172.237.54.196 - - [20/Jun/2026:06:16:21 -0300] "GET /fog/management/index.php?node=client&sub=logininfo HTTP/1.1" 404 414 - 172.237.54.196 - - [20/Jun/2026:06:16:22 -0300] "GET /cgi-bin/param.cgi?get_device_conf HTTP/1.1" 404 414 - 172.237.54.196 - - [20/Jun/2026:06:16:22 -0300] "GET /r-seenet/index.php HTTP/1.1" 404 414 - 172.237.54.196 - - [20/Jun/2026:06:16:22 -0300] "GET /tos/index.php?user/login HTTP/1.1" 404 414 - 172.237.54.196 - - [20/Jun/2026:06:16:22 -0300] "GET /lms/db HTTP/1.1" 404 414 show less	Bad Web Bot
🇧🇷 diego	2026-06-20 04:10:20 (1 day ago)	[probe-44-49] 2026-06-20 03:51:44, Client: 172.237.54.196, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-06-20 03:51:44, Client: 172.237.54.196, Protocol: 6, Unauthorized activity to HTTP: GET /human.aspx show less	Web App Attack
Anonymous	2026-06-19 00:55:27 (2 days ago)	Port scan and brute force attack	Port Scan Brute-Force
🇧🇷 diego	2026-06-18 20:51:26 (2 days ago)	[rede-164-29] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeuserconten ... show more [rede-164-29] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeusercontent.com). 11 hits in the last 290 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 18 17:51:12 kernel: [18958127.689288] Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=25434 DF PROTO=TCP SPT=58298 DPT=2626 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 18 17:51:12 kernel: [18958127.697258] Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=47938 DF PROTO=TCP SPT=55996 show less	Port Scan
🇧🇷 opastorello	2026-06-18 19:55:11 (2 days ago)	T-Pot honeypot: 9287 hits in 15min on port(s) 3306,3389,1025,9100,9303 (P0f/Suricata/Honeytrap). RDP ... show more T-Pot honeypot: 9287 hits in 15min on port(s) 3306,3389,1025,9100,9303 (P0f/Suricata/Honeytrap). RDP brute-force/scan. Automated report. show less	Port Scan Hacking Brute-Force
🇧🇷 diego	2026-06-18 12:10:45 (3 days ago)	[rede-arem1] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeusercontent ... show more [rede-arem1] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeusercontent.com). 11 hits in the last 270 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 18 09:10:39 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=39259 DF PROTO=TCP SPT=53184 DPT=5060 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 18 09:10:39 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=14297 DF PROTO=TCP SPT=44552 DPT=9098 WINDOW=64240 RES=0x00 SYN show less	Port Scan
🇧🇷 diego	2026-06-18 08:38:26 (3 days ago)	[rede-164-29] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeuserconten ... show more [rede-164-29] Port Scan detected from 172.237.54.196 (BR/Brazil/172-237-54-196.ip.linodeusercontent.com). 11 hits in the last 180 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 18 05:38:07 kernel: [10966639.017574] Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=51308 DF PROTO=TCP SPT=37252 DPT=2060 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 18 05:38:07 kernel: [10966639.017816] Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=172.237.54.196 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=2894 DF PROTO=TCP SPT=46818 show less	Port Scan
🇧🇷 diego	2026-06-10 13:43:44 (1 week ago)	[rede-164-29] 06/10/2026-10:43:44.131779, 172.237.54.196, Protocol: 6, ET SCAN Suspicious inbound to ... show more [rede-164-29] 06/10/2026-10:43:44.131779, 172.237.54.196, Protocol: 6, ET SCAN Suspicious inbound to Oracle SQL port 1521 show less	Hacking
🇧🇴 ahinojosa	2026-06-10 12:36:00 (1 week ago)	"Attack ID: 1002017481 Module: "Known Exploits" Check Type: "Generic Exploit" Desc: "This signature ... show more "Attack ID: 1002017481 Module: "Known Exploits" Check Type: "Generic Exploit" Desc: "This signature prevents attackers from gaining sensitive information from vulnerable systems(CVE-2024-8956)."" show less	Bad Web Bot Web App Attack Hacking

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 206.189.234.28

🇧🇷 187.51.84.86

🇺🇸 162.251.122.69

🇺🇸 103.234.62.58

🇫🇷 91.231.89.179

🇳🇱 91.92.242.140

🇧🇬 78.128.114.102

🇺🇸 66.132.172.106

🇻🇳 45.119.212.99

🇺🇸 43.153.123.4

🇱🇹 185.169.4.230

🇷🇺 178.217.231.161

🇳🇱 176.65.139.181

🇨🇳 113.57.184.184

🇨🇳 58.19.142.128

🇩🇪 47.245.143.183

🇭🇰 199.45.154.152

🇨🇳 182.242.168.151

🇳🇱 176.65.132.210

🇺🇸 147.185.132.171