JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

189.6.210.35

Activity Trending Down

Abuse Confidence Score

2% Caution

42 reports

24 reporters · latest 2 weeks ago

ISP: Claro NXT Telecomunicacoes Ltda
Usage Type: Fixed Line ISP
ASN: AS28573
Hostname(s): bd06d223.virtua.com.br
Domain Name: claro.com.br
Country: 🇧🇷 Brazil
City: Porto Alegre, Rio Grande do Sul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

42 from 24 distinct reporters

First reported

August 22nd 2025

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 4

Most common categories Port Scan 4

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-10-29 12:21:26 UTC · (2 weeks ago)	4 incidents: malicious activity. First: 2026-10-20 19:36, Last: 2026-10-29 08:21 UTC. Triggers: unknown.	Port Scan
🇺🇸 micropedro	2026-10-19 22:46:59 UTC · (3 weeks ago)	3 incidents: malicious activity. First: 2026-10-11 09:53, Last: 2026-10-19 18:46 UTC. Triggers: unknown.	Port Scan
🇺🇸 micropedro	2026-10-05 11:29:04 UTC · (1 month ago)	3 incidents: malicious activity. First: 2026-09-24 10:15, Last: 2026-10-05 07:29 UTC. Triggers: unknown.	Port Scan
🇺🇸 micropedro	2026-09-23 00:19:04 UTC · (1 month ago)	3 incidents: malicious activity. First: 2026-09-04 06:43, Last: 2026-09-22 20:19 UTC. Triggers: unknown.	Port Scan
🇧🇷 noconex	2026-09-09 03:56:13 UTC · (2 months ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 189.6.210.35	Port Scan Brute-Force SSH
Anonymous	2026-09-09 02:42:18 UTC · (2 months ago)	35819/udp (1 or more attempts)	Port Scan
🇩🇪 ValtonTahiri	2026-09-05 11:03:58 UTC · (2 months ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=189.6.210.35; proto=UDP; source_port=13243; target ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=189.6.210.35; proto=UDP; source_port=13243; target_port=60966 show less	Port Scan
🇧🇷 cibersecoptidata	2026-09-05 02:57:54 UTC · (2 months ago)	Port scan / Unsolicited traffic.	Port Scan
🇩🇪 Admins@FBN	2026-09-05 00:41:40 UTC · (2 months ago)	FW-PortScan: Traffic Blocked srcport=5867 dstport=48130	Port Scan
🇫🇮 6kilowatti	2026-09-04 18:53:47 UTC · (2 months ago)	2026-09-04T21:53:46.606600+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=189.6.210.35 DST=83.148.240.21 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=27427 DF PROTO=TCP SPT=5636 DPT=53 WINDOW=65535 RES=0x00 S ... show more 2026-09-04T21:53:46.606600+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=189.6.210.35 DST=83.148.240.21 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=27427 DF PROTO=TCP SPT=5636 DPT=53 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇪 ORDUNET	2026-09-03 19:56:20 UTC · (2 months ago)	Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:27004/udp in AS203136 (LLC Ordunet), Georgia. This source sustained more than 150 packets/sec toward that single UDP port and was one of 3229 distinct sources from 1488 autonomous ... show more Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:27004/udp in AS203136 (LLC Ordunet), Georgia. This source sustained more than 150 packets/sec toward that single UDP port and was one of 3229 distinct sources from 1488 autonomous systems in 139 countries taking part in a coordinated flood on 2026-09-03/04. Our border router discarded 184 million packets (149 GB) of this attack traffic in 24 hours. Detected on a MikroTik RouterOS router by per-source rate accounting in the raw/prerouting chain (dst-limit 150,50,src-address/10s); the timestamp is the moment this source crossed the threshold, timezone +04:00. This is not a port scan and not a brute-force attempt - it is a packet flood, so the host is almost certainly compromised and part of a botnet. Full packet-level evidence available on request to [email protected]. show less	DDoS Attack Exploited Host
🇧🇷 diego	2026-09-02 08:04:10 UTC · (2 months ago)	[rede-168-134] 09/02/2026-05:04:10.156651, 189.6.210.35, Protocol: 17, ET CINS Active Threat Intelligence Poor Reputation IP group 261	Hacking
Anonymous	2026-09-01 11:39:15 UTC · (2 months ago)	1365/udp (1 or more attempts)	Port Scan
Anonymous	2026-08-29 10:54:07 UTC · (2 months ago)	[UDP/53607] Unsolicited connection attempt on a port with no legitimate public service.	Port Scan Hacking
Anonymous	2026-08-27 00:56:38 UTC · (2 months ago)	16704/udp (1 or more attempts)	Port Scan

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 187.245.215.114

🇦🇷 186.12.169.145

🇧🇷 179.228.180.136

🇷🇺 109.106.138.63

🇸🇮 31.57.216.46

🇩🇪 102.220.162.137

🇺🇸 70.184.96.147

🇳🇱 45.148.10.151

🇻🇳 210.245.30.140

🇨🇭 104.251.180.156

🇵🇱 81.162.213.244

🇩🇪 69.5.169.229

🇩🇪 64.188.91.167

🇨🇦 45.198.224.251

🇺🇸 172.174.128.184

🇺🇸 40.124.123.24

🇯🇵 8.211.168.73

🇰🇿 212.154.254.116

🇺🇸 156.242.64.5

🇺🇸 68.167.206.124