189.5.218.5
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Claro NXT Telecomunicacoes Ltda
- Usage Type
- Fixed Line ISP
- ASN
- AS28573
- Hostname(s)
- bd05da05.virtua.com.br
- Domain Name
- claro.com.br
- Country
- 🇧🇷 Brazil
- City
- Batatais, Sao Paulo
Abuse Reports
Total reports
90 from
58 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RAP |
2026-11-14 16:05:26 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-11-14 16:40:36 | LAST=2026-11-14 16:40:36. Last seen 2026-11-14 16:40:36.
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-14 08:02:29 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-13 13:05:33 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 22,23 (12 or more attempts)
|
Port Scan | |
| 🇩🇪 Coinetic AI Security |
Connection to a trap port: 1 attempts on port 23, 2026-11-13 00:35 - 00:35 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
|
Port Scan Hacking | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇩🇪 cloudmax |
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 4 application-level events across 2 target ports and 4 source port(s). Ports: 22/SSH, 23/Telnet. Sensors: Cowrie.
|
Port Scan | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
|
Hacking | |
| 🇫🇷 ipfyx |
Port scanning
|
Port Scan | |
| 🇩🇪 anycast_ac |
Blocked by UFW on baremetal1 [23/tcp] | SPT: 35690 | TTL: 51 | LEN: 60 | TOS: 0x00 • Reported by: FemboyHolding LTD
|
Port Scan IoT Targeted | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 58154
TTL: 46
Packet length: 60
TOS: 0x08
This report (for 189.5.218.5) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 ras07 |
Brute force SSH login attempts.
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown