IPHighVerifiedSignal 47/100
45.205.1.88
Location
BrazilSão Paulo, São Paulo
ASN
AS215925
Vpsvault.host LTD
First Seen
Feb 28, 2026
Last Seen
Jun 3, 2026
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
47%
Signal Score
47 / 100
IDS Rule
No
Threat Context
Tags
Network Information
CountryBrazil
BrazilRegionSão Paulo, São Paulo
ASNAS215925
OrganizationVpsvault.host LTD
Feed Intelligence Summary
5 reports47% confidence
5
Source reports
47%
Confidence score
Category tags
abuseactive scanbad reputationbrazilbrute forcebrute force attackerindicatornetworknorth americaportscanresearchedscannersservice scansouth americaunited statesvultr
Activity Timeline
Jun 3Jun 3
Threat Activity Heatmap
· Peak: 2026-06-03LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
47
SIGNAL
Signal Score
47%
Confidence
5
Reports
First seenFeb 28, 2026
Last seenJun 3, 2026
Verified IOC
GeolocationBR
CountryBrazil
LocationSão Paulo, São Paulo
ASNAS215925
OrgVpsvault.host LTD
Coords-23.5558, -46.6396
VirusTotal
Not checked
WHOIS
- description
- IPv4 hosts detected port scanning Vultr Tokyo (Japan) honeypot
- raw
- inetnum: 45.205.1.0 - 45.205.1.255 netname: VPSVAULTHOST_LTD descr: VPSVAULT.HOST LTD country: BR admin-c: CIS1-AFRINIC tech-c: CIS1-AFRINIC status: ASSIGNED PA mnt-by: CIL1-MNT mnt-by: LARUS-SERVICE-MNT source: AFRINIC # Filtered parent: 45.192.0.0 - 45.207.255.255 person: Cloud Innovation Support address: Ebene address: MU address: Mahe address: Seychelles phone: tel:+248-4-610-795 nic-hdl: CIS1-AFRINIC abuse-mailbox: [email protected] mnt-by: CIL1-MNT source: AFRINIC # Filtered
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 3 months ago · Last seen 10 days ago
Appeared in 5 threat reports