189.4.110.56

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
15% Caution
92 reports
45 reporters · latest 1 week ago
ISP
Claro NXT Telecomunicacoes Ltda
Usage Type
Fixed Line ISP
ASN
AS28573
Hostname(s)
bd046e38.virtua.com.br
Domain Name
claro.com.br
Country
🇧🇷 Brazil
City
Florianopolis, Santa Catarina
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
92 from 45 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 4 🇫🇮 Finland 1 🇷🇺 Russian Federation 1
Most common categories Port Scan 5 DDoS Attack 2 Exploited Host 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-19 18:46, Last: 2026-10-23 08:10 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-05 07:29, Last: 2026-10-16 15:46 UTC. Triggers: unknown.
Port Scan
🇷🇺 AbuseIPDB informer
nfdump top talker: 189.4.110.56 | first seen 2026-10-13 08:11:50.784 | duration 00:00:00.068 | flows=1 | packets=21483 | bytes=16.0 M | pps=314 | bps=1.9 M | bpp=744 | proto=any
DDoS Attack Port Scan Exploited Host
🇫🇮 saamkuu
DDoS botnet: TCP connection flood, 18 connections to port 443.
DDoS Attack
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-09-22 20:19, Last: 2026-09-29 18:52 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-08-25 17:10, Last: 2026-09-09 19:47 UTC. Triggers: unknown.
Port Scan
Anonymous
MikroTik Enterprise Honeypot
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 10958.
Port Scan Hacking
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-06-28 19:54, Last: 2026-08-20 06:38 UTC. Triggers: ufw-repeater,unknown,ufw-repeater.
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 443.
Port Scan Hacking
Anonymous
11025/udp (1 or more attempts)
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=10479 dstport=4348
Port Scan
🇺🇸 anon333
Hacker syslog review 1784878422
Hacking
🇺🇸 COMPLEX
Banned by Multi Agent · node …391q · reason=SSH banner invalid / banner exchange invalid format · attempts=1 · SSH banner invalid / banner exchange invalid format
Brute-Force SSH
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=5252 dstport=9750
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 218.238.5.110
🇨🇳 113.200.238.158
🇬🇧 35.203.210.207
🇲🇾 180.74.227.40
🇺🇸 173.61.142.75
🇳🇱 158.94.210.216
🇨🇦 158.69.55.82
🇺🇸 158.46.161.52
🇳🇱 77.239.124.146
🇺🇸 64.62.197.189
🇺🇸 64.62.197.185
🇮🇳 49.207.182.187
🇨🇦 34.186.216.48
🇺🇸 34.31.154.237
🇫🇷 5.39.1.237
🇨🇳 211.144.146.93
🇲🇽 189.147.225.19
🇳🇱 185.136.15.15
🇲🇽 158.23.179.22
🇸🇬 157.245.204.205
feedback