IOC Radar
IPHighVerifiedSignal 47/100

45.205.1.134

Location
BrazilBrazil
São Paulo, São Paulo
ASN
AS215925
Vpsvault.host LTD
First Seen
Feb 28, 2026
Last Seen
Jun 2, 2026
Feb 28
First Seen
106d ago
Jun 2
Last Seen
12d ago
5
Reports
source reports
47%
Confidence
high
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
47%
Signal Score
47 / 100
IDS Rule
No
Threat Context
Tags

Network Information

CountryBRBrazil
RegionSão Paulo, São Paulo
ASNAS215925
OrganizationVpsvault.host LTD

Feed Intelligence Summary

5 reports47% confidence
5
Source reports
47%
Confidence score
Category tags
abuseactive scanafricabad reputationbrazilbrute forcebrute force attackerindicatornetworknorth americaportscanresearchedscannersservice scansouth africasouth americaunited statesvultr

Activity Timeline

1 total obs
Jun 2Jun 2

Threat Activity Heatmap

· Peak: 2026-06-02
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated

This Indicator of Compromise (IOC), an IPv4 address with a score of 46.93, represents a significant and active threat to organizational security. It has been extensively reported across multiple threat intelligence feeds, including those specifically tracking 'Brute Force Attackers' and 'Port Scanning Hosts,' indicating its direct involvement in hostile reconnaissance and potential attack preparation activities. The consistent reporting across diverse sources underscores the persistent nature of…

Threat ScoreMedium Risk
47
SIGNAL
Signal Score
47%
Confidence
5
Reports
First seenFeb 28, 2026
Last seenJun 2, 2026
Verified IOC
GeolocationBR
CountryBrazil
LocationSão Paulo, São Paulo
ASNAS215925
OrgVpsvault.host LTD
Coords-29.0000, 24.0000

VirusTotal

Not checked

WHOIS

description
IPv4 hosts detected port scanning Vultr Tokyo (Japan) honeypot
raw
inetnum: 45.205.1.0 - 45.205.1.255 netname: VPSVAULTHOST_LTD descr: VPSVAULT.HOST LTD country: BR admin-c: CIS1-AFRINIC tech-c: CIS1-AFRINIC status: ASSIGNED PA mnt-by: CIL1-MNT mnt-by: LARUS-SERVICE-MNT source: AFRINIC # Filtered parent: 45.192.0.0 - 45.207.255.255 person: Cloud Innovation Support address: Ebene address: MU address: Mahe address: Seychelles phone: tel:+248-4-610-795 nic-hdl: CIS1-AFRINIC abuse-mailbox: [email protected] mnt-by: CIL1-MNT source: AFRINIC # Filtered
references
https://jamesbrine.com.au/vultrtokyo-portscan-bruteforce-ip-list-2026-04-16/, https://jamesbrine.com.au, https://jamesbrine.com.au/vultrmelbournetest-portscan-bruteforce-ip-list-2026-04-16/

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 3 months ago · Last seen 12 days ago
Appeared in 5 threat reports