191.6.64.70

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
85% Critical
20 reports
14 reporters · latest 17 hours ago
ISP
portal provedor de comunicações ltda
Usage Type
Fixed Line ISP
ASN
AS263548
Domain Name
portalcom.net.br
Country
🇧🇷 Brazil
City
Nova Prata, Rio Grande do Sul
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
20 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 5 🇺🇸 United States of America 5 🇩🇪 Germany 3
Most common categories Port Scan 14 Brute-Force 8 SSH 6 Hacking 3 IoT Targeted 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp ports: 23,22 (14 or more attempts)
Port Scan
🇹🇼 kk_it_man
honey catch
Port Scan
🇩🇪 Kitki30.com
Entered SSH Tarpit (endlessh, server 3). Log: 2026-11-08T01:45:23.004Z ACCEPT host=::ffff:191.6.64.70 port=43465 fd=4 n=1/4096
Brute-Force SSH Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:43782 dst:23
Port Scan
🇫🇷 uthul
T-Pot honeypot: 17 hits on ports [22, 23] (automated)
Port Scan Brute-Force SSH
🇹🇭 Sawasdee
SSH break in attempt ...
SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇪🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 50 | Len: 60B | Win: 65535(1) | F2B/ufw-honeypot@2026-11-06T20:53:20Z
Port Scan Hacking
🇵🇱 Kitki30.com
Entered Telnet Tarpit (endlessh, server 1). Log: 2026-11-06T15:02:36.611Z ACCEPT host=::ffff:191.6.64.70 port=41771 fd=27 n=36/4096
IoT Targeted Port Scan Brute-Force
🇬🇧 tpguy825
SSH bruteforce from 191.6.64.70 port 42114, stuck in tarpit for 1020.196 secs
Hacking Brute-Force SSH
🇺🇸 RH5
Information disclosure probe (Information disclosure: readme.html). UTC 2026-11-06 07:28
Web App Attack
🇫🇷 gianluca.demartino75
2026-11-06T06:51:25.249452+01:00 vps-49934a4d endlessh[1790016]: 2026-11-06T05:51:25.248Z ACCEPT host=::ffff:191.6.64.70 port=42667 fd=4 n=1/4096 ...
Brute-Force SSH
Anonymous
[Firewall] Blacklisted: manual | ISP: portal provedor de comunicações ltda | Origin: Bento Gonçalves, Brazil | Prior AbuseIPDB score: 40% (7 reports) | Blocked at: 2026-11-05 18:28:01
Brute-Force
Anonymous
denied SSH access attempt. destination port 22.
Port Scan Brute-Force SSH
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 116.179.32.95
🇫🇷 80.13.227.59
🇺🇸 70.169.11.214
🇻🇳 59.153.224.163
🇺🇸 54.226.93.64
🇸🇬 45.43.63.68
🇮🇷 37.148.87.8
🇧🇬 185.255.212.8
🇨🇱 170.233.192.239
🇳🇵 157.119.70.200
🇵🇰 144.48.134.86
🇷🇺 91.144.158.62
🇮🇳 59.145.126.18
🇹🇼 198.235.24.87
🇧🇷 179.89.244.80
🇻🇪 170.254.172.216
feedback