JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.34.144.53

189.34.144.53 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 48%: ?

48%

ISP	Claro NXT Telecomunicacoes Ltda
Usage Type	Fixed Line ISP
ASN	AS28573
Hostname(s)	bd229035.virtua.com.br
Domain Name	claro.com.br
Country	🇧🇷 Brazil
City	Mongagua, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.34.144.53

Whois 189.34.144.53

IP Abuse Reports for 189.34.144.53:

This IP address has been reported a total of 16 times from 15 distinct sources. 189.34.144.53 was first reported on November 21st 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-10-22 00:02:59 (16 hours ago)	Web application attack detected	Hacking Web App Attack
🇪🇸 librebit	2026-10-21 05:20:09 (1 day ago)	Bad guys doing bad things, bad crawling	Bad Web Bot
Anonymous	2026-10-20 10:03:57 (2 days ago)	Cross-site scripting (XSS) attempt against web application.	Web App Attack
🇧🇷 alcacerlab	2026-10-20 05:53:36 (2 days ago)	189.34.144.53 - - [20/Oct/2026:02:53:35 -0300] "GET /index.php?route=/etc/passwd&product_id=822 HTTP ... show more 189.34.144.53 - - [20/Oct/2026:02:53:35 -0300] "GET /index.php?route=/etc/passwd&product_id=822 HTTP/2" 301 - "http://www.alcacerlab.com.br/index.php?route=/etc/passwd&product_id=822" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-20 05:26:03 (2 days ago)	(mod_security) mod_security (id:212620) triggered by 189.34.144.53 (bd229035.virtua.com.br): 1 in th ... show more (mod_security) mod_security (id:212620) triggered by 189.34.144.53 (bd229035.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 01:25:58.882385 2026] [security2:error] [pid 6635:tid 6635] [client 189.34.144.53:13445] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|www.laboquimia.es\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /catalogo/producto.php?codigo=\\x22><script>alert(string.fromcharcode(88,83,83))</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.laboquimia.es"] [uri "/catalogo/producto.php"] [unique_id "atb7ZmhCiaAXi4X-9j3p0AAAAAE"], referer: http://www.laboquimia.es/catalogo/producto.php?codigo="><script >alert(String.fromCharCode(88,83,83))</script> show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 penjaga BRIN	2026-10-20 04:03:09 (2 days ago)	Cross-site scripting attempt	Web App Attack
🇵🇹 Information Security	2026-10-20 03:45:01 (2 days ago)	Web App Attack ...	Web App Attack
🇺🇸 鬼影233	2026-09-24 06:23:56 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-23 18:31:24 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-08-20 00:36:58 (2 months ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /7-velo-electrique-ville \| query: q=Taille-L%2FFamille-Tria-Sub show less	DDoS Attack Web App Attack
🇯🇵 Kinsei Engineering Inc.	2026-07-29 12:47:02 (2 months ago)	UFW:High-frequency access to non-released SSH or Telnet ports	SSH Port Scan
🇫🇷 security.rdmc.fr	2026-07-29 04:00:03 (2 months ago)	Port Scan Attack proto:TCP src:10678 dst:23	Port Scan
Anonymous	2026-07-28 22:42:04 (2 months ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇨🇦 polycoda	2026-06-18 10:38:44 (4 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 SiliSoftware	2026-03-26 11:54:27 (6 months ago)	/phpBB3/memberlist.php?mode=viewprofile&u=1766	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 201.249.192.30

🇮🇳 168.144.94.200

🇫🇮 147.185.133.188

🇮🇳 147.93.170.166

🇳🇱 138.226.239.233

🇳🇱 95.85.226.199

🇬🇧 94.1.189.46

🇸🇪 81.234.46.185

🇺🇸 72.215.33.118

🇺🇸 70.183.232.207

🇺🇸 66.132.195.185

🇮🇳 59.93.105.215

🇰🇷 47.80.62.205

🇸🇬 47.79.206.98

🇻🇳 27.79.2.7

🇨🇳 14.17.84.157

🇳🇱 194.88.98.101

🇮🇹 194.60.213.66

🇭🇰 156.225.1.35

🇺🇸 152.163.101.2