189.6.19.151
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Claro NXT Telecomunicacoes Ltda
- Usage Type
- Fixed Line ISP
- ASN
- AS28573
- Domain Name
- claro.com.br
- Country
- 🇧🇷 Brazil
- City
- Brasilia, Federal District
Abuse Reports
Total reports
15 from
12 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-10-14 UTC.
|
Exploited Host | |
| 🇬🇧 Nov |
Unauthorized access attempt (tcp/5555)
|
Port Scan | |
| 🇨🇿 0x44 |
TCPv4 invalid checksum
|
Port Scan | |
| 🇧🇷 cibersecoptidata |
Port scan / Unsolicited traffic.
|
Port Scan | |
| 🇬🇧 Axel |
Blocked by UFW on BGPGB [5555/tcp] | SPT: 25689 | TTL: 47 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇬🇧 Axel |
Blocked by UFW on BGPGB [5555/tcp] | SPT: 25689 | TTL: 48 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=25689 dstport=5555
|
Port Scan | |
| 🇧🇷 cibersecoptidata |
Port scan / Unsolicited traffic.
|
Port Scan | |
| 🇫🇷 Sklurk |
Web App Attack
|
Web App Attack | |
| Anonymous |
Unauthorized connection attempt on Port 23
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-post.asp
|
Bad Web Bot Exploited Host | |
| Anonymous |
scanning http requests from known botnet
|
Web App Attack | |
| Anonymous |
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report timestamp
|
Hacking Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown