189.6.233.68

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
4% Caution
25 reports
18 reporters · latest 1 day ago
ISP
Claro NXT Telecomunicacoes Ltda
Usage Type
Fixed Line ISP
ASN
AS28573
Hostname(s)
bd06e944.virtua.com.br
Domain Name
claro.com.br
Country
🇧🇷 Brazil
City
Porto Alegre, Rio Grande do Sul
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 4
Most common categories Port Scan 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-29 07:23, Last: 2026-11-10 07:20 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-19 18:46, Last: 2026-10-23 08:10 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-05 07:29, Last: 2026-10-16 15:46 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-09-22 20:19, Last: 2026-09-29 18:52 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-08-25 17:10, Last: 2026-09-09 19:47 UTC. Triggers: unknown.
Port Scan
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇺🇸 micropedro
3 incidents: port scanning. First: 2026-08-09 10:02, Last: 2026-08-20 06:38 UTC. Triggers: non-public-port,firewall-udp,unknown.
Port Scan
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇩🇪 iNetWorker
firewall-block, port(s): 44330/udp
Port Scan
🇮🇹 Fusty
Unauthorized attempt on (UDP on port 29140). Source port: 9274 TTL: 45 Packet length: 52 32 Timestamp: 2026-07-01 19:22:52
Port Scan
🇳🇱 DonAtari
DShield firewall scan - UDP to port 33428
Brute-Force SSH
🇳🇵 radheykrishna.com.np
Jul 1 03:15:28 kernel: [6344898.188876] [UFW BLOCK] IN=ens160 OUT= SRC=189.6.233.68 LEN=872 TOS=0x00 PREC=0x00 TTL=44 ID=20857 DF PROTO=UDP SPT=9371 DPT=10226 LEN=852 ...
Port Scan
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
Anonymous
Honeypot multi-source hit. Sources: dshield:fw,tpot:Suricata. Ports: 44838. Automated tiered (T-Pot+DShield).
Port Scan Hacking
🇩🇪 london2038.com
Malformed or malicious web request 189.6.233.68 - - [30/Jun/2026:03:13:46 +0200] "\xDF\x01\xC4" 400 157 "-" "-"
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 175.43.162.201
🇨🇳 124.174.7.42
🇳🇱 68.183.0.201
🇩🇪 23.132.164.173
🇺🇸 173.255.221.22
🇺🇸 98.204.215.210
🇵🇹 87.103.126.54
🇵🇱 81.162.208.136
🇮🇹 79.9.59.233
🇳🇱 77.67.26.131
🇳🇱 64.205.72.127
🇷🇴 2.57.121.112
🇮🇩 182.253.194.131
🇺🇸 172.56.25.216
🇻🇳 113.175.96.232
🇮🇩 103.174.64.201
🇿🇦 102.132.32.235
🇩🇪 85.155.14.247
🇷🇴 2.57.121.25
🇧🇷 168.0.73.143
feedback