189.6.19.158

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
29% Elevated
25 reports
19 reporters · latest 1 month ago
ISP
Claro NXT Telecomunicacoes Ltda
Usage Type
Fixed Line ISP
ASN
AS28573
Hostname(s)
bd06139e.virtua.com.br
Domain Name
claro.com.br
Country
🇧🇷 Brazil
City
Brasilia, Federal District
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇭🇰 Hong Kong 4 🇧🇷 Brazil 3
Most common categories Port Scan 17 Hacking 7 Brute-Force 3 Exploited Host 2 SSH 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇭 SOC [GOLINE SA]
Exploited Host Hacking
🇨🇦 design2web.ca
[UniFi FW] Inbound network intrusion attempt on port 58825 | Policy: Region Blocking | Proto: UDP | Src: 189.6.19.158:3904 | SrcRegion: BR | Detected: 2026-09-26 07:28:26 UTC | ISP: Claro NXT Telecomunicacoes Ltda | D2W UniFi AbuseIPDB Reporter v2
Port Scan
Anonymous
PROTO=UDP DPT=8199
Port Scan Hacking
🇨🇭 SOC [GOLINE SA]
Exploited Host Hacking
Anonymous
34303/udp (1 or more attempts)
Port Scan
Anonymous
41630/udp (1 or more attempts)
Port Scan
🇫🇷 Petre 21_ip
2026-09-25T09:57:08.506625+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=189.6.19.158 DST=155.133.26.57 LEN=61 TOS=0x00 PREC=0x00 TTL=52 ID=21038 DF PROTO=UDP SPT=3778 DPT=3497 LEN=41 ...
Port Scan
🇧🇷 diego
[rede-top188] 09/25/2026-04:46:34.986145, 189.6.19.158, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 270
Hacking
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇧🇷 cibersecoptidata
Port scan / Unsolicited traffic.
Port Scan
🇳🇱 DonAtari
DShield firewall scan - UDP to port 61797
Brute-Force SSH
Anonymous
[UDP/49663] Unsolicited connection attempt on a port with no legitimate public service.
Port Scan Hacking
🇧🇷 cibersecoptidata
Port scan / Unsolicited traffic.
Port Scan
🇫🇷 EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=3763 dstport=39721
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 189.112.156.137
🇨🇳 121.46.244.21
🇧🇷 45.182.57.92
🇳🇱 185.223.235.50
🇵🇱 172.64.200.5
🇫🇮 147.185.133.145
🇯🇵 118.27.6.160
🇨🇳 221.194.148.77
🇺🇸 217.216.82.136
🇯🇵 152.32.201.247
🇷🇴 81.196.204.93
🇰🇪 41.81.192.185
🇬🇧 35.203.210.245
🇺🇸 24.156.86.16
🇺🇸 20.106.75.210
🇧🇷 190.112.143.97
🇺🇸 146.19.90.231
🇰🇷 221.166.48.149
🇹🇼 198.235.24.92
🇺🇸 98.174.34.212
feedback