131.108.155.246

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
70% Elevated
14 reports
12 reporters · latest 2 hours ago
ISP
ULTRANET PROVEDOR CUSTODIA LTDA
Usage Type
Fixed Line ISP
ASN
AS270946
Domain Name
ultranettelecom.com
Country
🇧🇷 Brazil
City
Sao Lourenco da Mata, Pernambuco
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
14 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇷 Brazil 13 🇩🇪 Germany 1
Most common categories Brute-Force 14 SSH 14 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 SecOpsSL
Brute-Force SSH
🇧🇷 W8C Dev
Nov 12 02:06:27 vmori-manager-1 sshd[265476]: Connection closed by authenticating user root 131.108.155.246 port 56930 [preauth] ...
Brute-Force SSH
🇧🇷 paradoxnetworks
Brute-Force SSH
🇧🇷 wagnerbocchi
Brute-Force SSH
🇧🇷 tiwanetbr
Fail2Ban: Unauthorized connection / brute-force attempt detected (protocol: SSH, failed attempts: 3).
Brute-Force SSH
🇧🇷 Joao Antonio
Brute-Force SSH
🇧🇷 Felipe Brunelli de Andrade
Brute-Force SSH
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇧🇷 Sync
SSH brute-force detected by honeypot: 4 failed login attempts in 3s. Usernames tried: root. No real service on this host; no credentials were ever accepted.
Brute-Force SSH
🇧🇷 Vander Pereira
2026-11-12T01:20:05.119528-03:00 pbs sshd-session[1109431]: Failed password for root from 131.108.155.246 port 34408 ssh2
Brute-Force SSH
🇧🇷 tiwanetbr
Fail2Ban: Unauthorized connection / brute-force attempt detected (protocol: SSH, failed attempts: 4).
Brute-Force SSH
🇧🇷 wagnerbocchi
Brute-Force SSH
🇧🇷 Host One
Brute-Force SSH
🇧🇷 helix
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 120.83.229.113
🇺🇸 103.102.246.108
🇺🇸 23.234.103.73
🇺🇸 216.218.206.68
🇧🇪 198.235.24.165
🇷🇴 185.100.87.192
🇺🇸 173.249.253.93
🇺🇸 142.93.246.158
🇨🇳 120.48.20.147
🇫🇷 88.189.183.137
🇳🇱 77.239.124.143
🇺🇸 23.234.100.116
🇺🇸 23.234.93.48
🇺🇸 23.234.78.150
🇺🇸 23.234.74.54
🇻🇳 14.250.161.115
🇫🇷 212.83.141.109
🇧🇪 198.235.24.154
🇧🇪 198.235.24.139
🇹🇼 198.235.24.14
feedback