138.204.226.208

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
63 reports
41 reporters · latest 4 hours ago
ISP
Connectronic Servicos Ltda
Usage Type
Fixed Line ISP
ASN
AS263915
Hostname(s)
138.204.226.208-static.host.exo.net.br
Domain Name
connectronic.com.br
Country
🇧🇷 Brazil
City
Vitoria, Espirito Santo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
63 from 41 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 12 🇷🇸 Serbia 7 🇩🇪 Germany 6
Most common categories Port Scan 37 Hacking 14 Brute-Force 13 IoT Targeted 6 SSH 4
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇪🇸 Linux Fertxo
Unauthorized connection attempts: 3 hits @ port(s) 4899, protocol(s) tcp
Port Scan Hacking
🇬🇧 KTSTechnology
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
Port Scan
Anonymous
unsolicited connect TCP dport 23 (sport 23522)
Hacking
🇺🇸 HamSammich
Automated sensor: 2 telnet brute-force attempts over the last 24h (latest 2026-11-08T05:23Z).
Brute-Force IoT Targeted
🇺🇸 Andreas76
Port scan: connection attempt to an unused trap port. Reported by bantower.
Port Scan
🇧🇷 cibersecoptidata
Port scan / Unsolicited traffic.
Port Scan
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
🇪🇸 raiolanetworks.com
Honeypot detection: SSH/Telnet brute-force. 2 events observed. Reported automatically from a honeypot sensor.
Brute-Force SSH
🇺🇸 IndigoRidge
Knock-Knock TNET honeypot activity; time=2026-11-07 22:12:07; username=root
Brute-Force
🇺🇸 RAP
2026-11-07 21:25:34 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-11-07 19:13:56 | LAST=2026-11-07 19:13:57. Last seen 2026-11-07 19:13:57.
Port Scan
🇺🇸 scharsey
Honeypot: 14 TELNET events incl. login attempts
Brute-Force IoT Targeted
🇦🇺 Block Rockin' Beats
Attempted connection to TCP port 23
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.148.10.151
🇧🇪 34.156.121.5
🇻🇳 27.75.71.8
🇹🇼 211.75.76.181
🇻🇳 210.245.52.136
🇧🇪 198.235.24.181
🇨🇱 190.100.210.135
🇧🇬 158.58.214.165
🇳🇱 104.248.206.80
🇺🇸 98.174.60.201
🇺🇸 40.124.186.156
🇺🇸 40.124.113.145
🇨🇳 36.7.90.98
🇷🇺 31.23.233.78
🇧🇪 23.251.135.142
🇺🇸 23.227.147.163
🇺🇸 20.171.192.139
🇨🇳 14.103.105.62
🇨🇳 223.243.126.151
🇮🇳 202.0.148.208
feedback