AbuseIPDB » 160.191.52.76

160.191.52.76 was found in our database!

This IP was reported 9,901 times. Confidence of Abuse is 28%: ?

28%

ISP	Totdata Data and Digital Services Company Limited
Usage Type	Fixed Line ISP
ASN	AS45899
Domain Name	totdata.xyz
Country	Viet Nam
City	Hanoi, Hanoi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 160.191.52.76

Whois 160.191.52.76

IP Abuse Reports for 160.191.52.76:

This IP address has been reported a total of 9,901 times from 1,115 distinct sources. 160.191.52.76 was first reported on March 30th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Porter	2025-07-02 20:04:33 (1 week ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-06-20 01:50:21 (3 weeks ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-05-28 17:30:06 (1 month ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
AdrianT	2025-05-27 06:35:36 (1 month ago)	SSH brute force	Brute-Force SSH
Porter	2025-05-23 12:06:28 (1 month ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
london2038.com	2025-05-20 08:44:10 (1 month ago)	Connection atttempts against closed TCP ports May 20 08:46:52 BLOCK SRC=160.191.52.76 LEN=44 T ... show moreConnection atttempts against closed TCP ports May 20 08:46:52 BLOCK SRC=160.191.52.76 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=31553 PROTO=TCP SPT=43285 DPT=16028 WINDOW=1024 RES=0x00 SYN May 20 09:10:28 BLOCK SRC=160.191.52.76 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=60091 PROTO=TCP SPT=43285 DPT=19878 WINDOW=1024 RES=0x00 SYN May 20 10:41:56 BLOCK SRC=160.191.52.76 LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=1238 PROTO=TCP SPT=50415 DPT=18438 WINDOW=1024 RES=0x00 SYN show less	Port Scan
qli.de	2025-05-20 06:07:56 (1 month ago)	May 1 13:08:17 v2202111159968167802 sshd[1704528]: Invalid user support from 160.191.52.76 port 554 ... show moreMay 1 13:08:17 v2202111159968167802 sshd[1704528]: Invalid user support from 160.191.52.76 port 55494 May 1 13:08:17 v2202111159968167802 sshd[1704527]: Invalid user usario from 160.191.52.76 port 55498 May 1 13:08:17 v2202111159968167802 sshd[1704526]: Invalid user admin from 160.191.52.76 port 55480 May 1 13:08:17 v2202111159968167802 sshd[1704529]: Invalid user ubnt from 160.191.52.76 port 55502 May 1 13:08:17 v2202111159968167802 sshd[1704530]: Invalid user user from 160.191.52.76 port 55482 ... show less	Brute-Force SSH
sf-noh.de	2025-05-20 06:07:56 (1 month ago)	May 1 13:08:17 v2202111159968167802 sshd[1704528]: Invalid user support from 160.191.52.76 port 554 ... show moreMay 1 13:08:17 v2202111159968167802 sshd[1704528]: Invalid user support from 160.191.52.76 port 55494 May 1 13:08:17 v2202111159968167802 sshd[1704527]: Invalid user usario from 160.191.52.76 port 55498 May 1 13:08:17 v2202111159968167802 sshd[1704526]: Invalid user admin from 160.191.52.76 port 55480 May 1 13:08:17 v2202111159968167802 sshd[1704529]: Invalid user ubnt from 160.191.52.76 port 55502 May 1 13:08:17 v2202111159968167802 sshd[1704530]: Invalid user user from 160.191.52.76 port 55482 ... show less	Brute-Force SSH
london2038.com	2025-05-20 02:29:37 (1 month ago)	Connection atttempts against closed TCP ports May 20 03:56:17 BLOCK SRC=160.191.52.76 LEN=40 T ... show moreConnection atttempts against closed TCP ports May 20 03:56:17 BLOCK SRC=160.191.52.76 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=31840 PROTO=TCP SPT=46140 DPT=28083 WINDOW=1024 RES=0x00 SYN May 20 04:11:36 BLOCK SRC=160.191.52.76 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=26974 PROTO=TCP SPT=46140 DPT=17143 WINDOW=1024 RES=0x00 SYN May 20 04:29:36 BLOCK SRC=160.191.52.76 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=30509 PROTO=TCP SPT=46140 DPT=18249 WINDOW=1024 RES=0x00 SYN show less	Port Scan
David Ferneding	2025-05-20 01:42:02 (1 month ago)	Blocked by UFW (TCP on 38992) Source port: 43801 TTL: 244 Packet length: 40 ... show moreBlocked by UFW (TCP on 38992) Source port: 43801 TTL: 244 Packet length: 40 TOS: 0x00 This report (for 160.191.52.76) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-05-19 15:57:08 (1 month ago)	slow and persistent scanner	Port Scan Hacking Exploited Host
Woodie	2025-05-19 04:11:43 (1 month ago)	2025-05-19T00:10:03.178685-04:00 debian sshd[1184013]: Failed password for invalid user user from 16 ... show more2025-05-19T00:10:03.178685-04:00 debian sshd[1184013]: Failed password for invalid user user from 160.191.52.76 port 38588 ssh2 2025-05-19T00:11:38.242475-04:00 debian sshd[1185691]: Invalid user ubnt from 160.191.52.76 port 50316 2025-05-19T00:11:38.245992-04:00 debian sshd[1185691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.191.52.76 2025-05-19T00:11:39.778643-04:00 debian sshd[1185691]: Failed password for invalid user ubnt from 160.191.52.76 port 50316 ssh2 2025-05-19T00:11:42.697918-04:00 debian sshd[1185771]: Invalid user cisco from 160.191.52.76 port 50362 ... show less	Brute-Force SSH
rtbh.com.tr	2025-05-17 20:08:12 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Study Bitcoin 🤗	2025-05-17 18:26:05 (1 month ago)	2 port probes: 2x tcp/491 (go-login) [gda]	Port Scan
Study Bitcoin 🤗	2025-05-17 17:28:31 (1 month ago)	2 port probes: 2x tcp/126 (unisys unitary login) [gda]	Port Scan

Showing 1 to 15 of 9901 reports

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩

Recently Reported IPs:

217.182.253.249

45.78.226.118

151.80.61.151

123.30.44.229

40.113.89.154

88.213.208.132

147.185.133.120

104.29.153.13

195.178.110.108

14.34.157.138

120.28.109.188

123.157.65.74

162.216.149.33

118.193.43.244

180.168.95.234

209.141.34.112

195.20.248.124

17.241.219.4

54.84.93.8

118.173.65.56