189.55.152.9

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
1% Caution
37 reports
23 reporters · latest 2 weeks ago
ISP
Claro NXT Telecomunicacoes Ltda
Usage Type
Fixed Line ISP
ASN
AS28573
Domain Name
claro.com.br
Country
🇧🇷 Brazil
City
Sao Vicente, Sao Paulo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
37 from 23 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇵🇱 Poland 1
Most common categories Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 maciejka
Brute-Force
Anonymous
denied traffic to a honeypot network. destination port 52214.
Port Scan Hacking
🇩🇪 phil2k
Firewall: Within 2026-07-05 09:43:40 - 2026-07-05 09:43:40 CEST(+0200) identified: unallowed access from 189.55.152.9 on port 63377(udp:63377) (1 trial)
Port Scan Brute-Force
🇺🇸 Zandro
distributed harvester
Bad Web Bot Exploited Host
🇩🇪 EGP Abuse Dept
Scraping webshop URLs (www.crea-art.nl), likely botnet drone
Bad Web Bot Exploited Host
🇩🇪 phil2k
Port Scan Brute-Force Ping of Death
Anonymous
Honeypot multi-source hit. Sources: dshield:fw,tpot:Suricata. Ports: 52015. Automated tiered (T-Pot+DShield).
Port Scan Hacking
Anonymous
Unauthorized connection attempt on Port 23
Port Scan Hacking Exploited Host
🇰🇷 winter
Connection attemp from 189.55.152.9 to port 22
Brute-Force SSH
🇺🇸 [email protected]
ASN: AS28573 Claro NXT Telecomunicacoes Ltda. Country: BR. Ports: 43783. Proto: UDP. Observations: 1. AbuseScore: 72/100
Port Scan
🇩🇪 iNetWorker
firewall-block, port(s): 50/udp
Port Scan
🇧🇷 diego
[rede-164-29] 06/28/2026-09:48:30.313276, 189.55.152.9, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 263
Hacking
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇨🇦 DRI
Unsolicited UDP traffic on Honeypot, srcport=3276 dstport=21917
Port Scan Hacking
🇬🇧 Nov
Unauthorized access attempt (udp/18085)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 198.235.24.193
🇦🇪 152.32.181.210
🇭🇰 123.58.219.82
🇩🇪 64.89.163.167
🇫🇷 51.38.224.114
🇬🇧 35.203.210.101
🇧🇪 34.77.25.245
🇺🇸 20.150.212.98
🇭🇰 5.187.38.30
🇩🇪 165.22.69.187
🇬🇧 92.27.250.45
🇬🇧 87.236.176.24
🇷🇺 84.201.243.44
🇨🇳 39.162.180.249
🇧🇪 35.210.75.156
🇧🇷 200.141.217.26
🇸🇬 193.37.32.130
🇬🇧 178.239.163.2
🇺🇸 162.216.149.87
🇵🇰 153.117.15.187
feedback