IP Address

132.248.170.105

IPv4 Public
MX MX
AS278
Universidad Nacional Autonoma de Mexico
78 Reports
This IP is on the Blacklist High confidence threat - blocking recommended
8/10 Threat
75% Confidence
78 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Above Average Risk
MX
MX Location
Universidad Nacional Auto... ASN 278
78 Reports
Mixed Data Source

Substantial Risk

Threat level 8/10 for 132.248.170.105 based on 78 documented incidents.

Consistent suspicious behavior patterns. 75% confidence rating.

More threatening than 89% of monitored IPs

Threat Categories

SSH 30
Brute-Force 8

Technical Details

SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.

Recommended Mitigations

Use key-based authentication, change default ports, implement fail2ban, and disable root login.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over 1 week indicates persistent threat actor operations.

First Observed 24. September 2026
Last Activity 2. October 2026
Recent (7 days) 0 incidents

Reputable Network

This IP is hosted on a network (ASN 278) with generally good reputation. The ISP Universidad Nacional Autonoma de Mexico maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Configure firewall rules and intrusion detection alerts.

Long-term blocking recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 1/10 Very Low
Confidence Score 75% High Confidence

Confidence History

3. Mar 2026 - 2. Oct 2026
75% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (30)

Date Categories Source Confidence
SSH Brute-Force Community 75%
SSH Brute-Force Community 75%
SSH Brute-Force Community 75%
SSH Brute-Force Community 75%
SSH Brute-Force Community 75%
SSH Brute-Force Community 75%
SSH Brute-Force Community 75%
SSH Brute-Force Community 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot x2 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
10 of 78 shown

Technical Details

Basic Information

IP Address
132.248.170.105
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class B

Geolocation

Country
MX MX
ASN
AS278
ISP
Universidad Nacional Autonoma de Mexico

DNS Information

Reverse DNS
None
PTR Record
No
Connection Type
Static

Statistics

Total Reports
78
First Reported
18 Feb 2026
Last Reported
2 Oct 2026, 02:43

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS278
Universidad Nacional Autonoma de Mexico
MX MX

Network Threat Assessment

2/10
This network appears to be relatively clean with very low threat indicators.

Network Statistics

7
Total IPs Monitored
284
Total Reports
40.6
Reports per IP

Network Context

This IP address belongs to Universidad Nacional Autonoma de Mexico (AS278), which manages 7 IP addresses in our monitoring system. Out of these, 284 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.

Network status: This network appears to be well-maintained with low threat indicators.

Comparative Analysis

How this IP compares to others in our threat intelligence database

89 %

Global Threat Ranking

This IP is more threatening than 89% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 854,994 reported IPs worldwide

Threat Level 8/10 avg: 6.3 +
Total Reports 78 avg: 9 ++

Network Comparison

Compared against 14 IPs in ASN 278

Threat Level 8/10 network avg: 7.0 =
Total Reports 78 network avg: 22 ++
Network Universidad Nacional Autonoma de Mexico has overall threat level 2/10

Geographic Comparison

Compared against 12,398 IPs in MX

Threat Level 8/10 country avg: 5.5 +
Total Reports 78 country avg: 5 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

776,913 threat incidents tracked globally • Last 24h: 34,199 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    151,610 19.5%
  2. 02
    BR
    Brazil BR
    113,169 14.6%
  3. 03
    IN
    India IN
    90,750 11.7%
  4. 04
    CN
    China CN
    46,848 6%
  5. 05
    SC
    SC SC
    29,271 3.8%
  6. 06
    DE
    Germany DE
    18,976 2.4%
  7. 07
    PK
    Pakistan PK
    18,564 2.4%
  8. 08
    NL
    Netherlands NL
    18,372 2.4%
  9. 09
    AR
    Argentina AR
    16,774 2.2%
  10. 10
    ID
    Indonesia ID
    15,477 2%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same country with similar threat profiles.

15 Related IPs
9.6/10 Avg Threat
95% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
187.216.224.85 10/10
Confidence 100%
Reports 38
ISP UNINET
6 Oct 2026
189.149.254.122 10/10
Confidence 100%
Reports 30
ISP Triara.com S.A....
12 Oct 2026
189.240.44.9 10/10
Confidence 99%
Reports 15
ISP UNINET
6 Oct 2026
148.245.1.106 10/10
Confidence 96%
Reports 52
ISP Axtel, S.A.B. d...
2 Oct 2026
187.62.120.7 8/10
Confidence 96%
Reports 31
ISP Bicentel SA de CV
4 Oct 2026
189.190.143.229 10/10
Confidence 96%
Reports 20
ISP UNINET
27 Sep 2026
187.154.98.53 8/10
Confidence 95%
Reports 12
ISP UNINET
9 Oct 2026
201.108.10.210 10/10
Confidence 94%
Reports 437
ISP UNINET
30 Sep 2026
189.254.200.132 10/10
Confidence 94%
Reports 55
ISP UNINET
2 Oct 2026
187.190.193.41 10/10
Confidence 94%
Reports 20
ISP TOTAL PLAY TELE...
2 Oct 2026
189.253.31.146 10/10
Confidence 94%
Reports 16
ISP UNINET
9 Oct 2026
216.238.73.199 10/10
Confidence 94%
Reports 15
ISP The Constant Co...
12 Oct 2026
189.162.100.193 8/10
Confidence 94%
Reports 12
ISP UNINET
2 Oct 2026
187.232.185.127 10/10
Confidence 93%
Reports 262
ISP UNINET
27 Sep 2026
187.190.254.178 10/10
Confidence 93%
Reports 261
ISP TOTAL PLAY TELE...
27 Sep 2026

IPs with similar threat level and confidence scores.

15 Related IPs
10/10 Avg Threat
75% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
34.153.192.171 10/10
Confidence 75%
Reports 7
Location JP JP
8 Oct 2026
86.98.146.32 10/10
Confidence 75%
Reports 12
Location AE AE
11 Oct 2026
2a00:1e88:429e:c700:6545:2d43:79f2:e2a8 10/10
Confidence 75%
Reports 7
Location RU RU
4 Oct 2026
197.43.235.232 10/10
Confidence 75%
Reports 13
Location EG EG
9 Oct 2026
103.108.67.180 10/10
Confidence 75%
Reports 9
Location HK HK
12 Oct 2026
102.209.111.144 10/10
Confidence 75%
Reports 12
Location UG UG
11 Oct 2026
149.56.244.181 10/10
Confidence 75%
Reports 8
Location CA CA
6 Oct 2026
38.123.220.178 10/10
Confidence 75%
Reports 12
Location MX MX
11 Oct 2026
183.230.54.87 10/10
Confidence 75%
Reports 9
Location CN CN
11 Oct 2026
2001:448a:5040:3349:67e6:74fa:137e:b95b 10/10
Confidence 75%
Reports 7
Location ID ID
3 Oct 2026
182.182.162.160 10/10
Confidence 75%
Reports 7
Location PK PK
4 Oct 2026
105.235.134.217 10/10
Confidence 75%
Reports 7
Location DZ DZ
1 Oct 2026
2409:4091:9077:7402:9d3d:17ca:79ad:1dc4 10/10
Confidence 75%
Reports 8
Location IN IN
3 Oct 2026
2401:4900:1c1b:558c:40e:a86f:f7e7:4822 10/10
Confidence 75%
Reports 7
Location IN IN
30 Sep 2026
186.42.96.62 10/10
Confidence 75%
Reports 8
Location EC EC
1 Oct 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "132.248.170.105",
    "threat_level": 8,
    "confidence_score": 75,
    "total_reports": 78,
    "country_code": "MX",
    "isp_name": "Universidad Nacional Autonoma de Mexico",
    "asn": "278",
    "first_reported": "2026-02-18 17:29:27",
    "last_reported": "2026-10-02 02:43:53",
    "exported_at": "2026-10-12T13:09:19+02:00",
    "source": "https://reportedip.com/ip/132.248.170.105/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses