191.188.241.96

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
77% Critical
36 reports
26 reporters · latest 3 days ago
ISP
Claro NXT Telecomunicacoes Ltda
Usage Type
Fixed Line ISP
ASN
AS28573
Hostname(s)
bfbcf160.virtua.com.br
Domain Name
claro.com.br
Country
🇧🇷 Brazil
City
Mogi das Cruzes, Sao Paulo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
36 from 26 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇱🇺 Luxembourg 5 🇩🇪 Germany 4 🇨🇿 Czechia 3
Most common categories Brute-Force 31 Exploited Host 7 Email Spam 5 Hacking 4 Port Scan 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 191.188.241.96 2026-11-11T15:29:26+0100 warning: unknown[191.188.241.96]: SASL authentication failed
Brute-Force
🇭🇺 Lacika555
RdpGuard detected brute-force attempt on SMTP
Brute-Force
Anonymous
SMTP brute force - auth failed
Brute-Force Exploited Host
🇵🇱 bmino.pl
Autoban IP(2): 191.188.241.96 - Hostname: Claro NXT Telecomunicacoes Ltda - City: Mogi das Cruzes - Country: Brazil - Organization: Claro NXT Telecomunicacoes Ltda - Reason: Suspicious activity detected by Fail2ban
Brute-Force
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-04 UTC.
Exploited Host
🇷🇴 clauss
IP reached maximum auth failures for a one day block
Brute-Force
🇫🇷 smtp.com.es
Brute force attempt.
Brute-Force Email Spam
🇹🇭 thaizone.com
Password guessing attack (SM11) #1
Email Spam Brute-Force
🇩🇰 powerhostingdk
[mailserver] CrowdSec detected mailscanner/global-spam-aggregate (31 events). Automated abuse report.
Brute-Force
Anonymous
SMTP brute force - auth failed
Brute-Force Exploited Host
🇩🇪 DocNetzwerk
(smtpauth) Failed SMTP AUTH login from 191.188.241.96 (BR/Brazil/bfbcf160.virtua.com.br)
Brute-Force
🇩🇪 tentwentyfour
Blocked for probing for SASL accounts (Email)
Brute-Force
🇫🇷 smtp.com.es
Brute force attempt.
Brute-Force Email Spam
🇮🇹 Progetto1
Mail - Multiple failed login attempts
Brute-Force Exploited Host
🇸🇰 Eurofluid
You shall not pass ! Abusive behavior blocked by EF firewall.
Port Scan Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 91.196.152.70
🇺🇸 45.148.235.153
🇬🇧 31.14.254.46
🇬🇧 195.96.139.62
🇨🇳 121.46.244.23
🇷🇺 91.202.233.64
🇺🇸 66.132.172.117
🇺🇸 44.199.169.105
🇹🇭 1.0.164.165
🇺🇦 193.194.106.40
🇺🇸 174.138.52.98
🇺🇸 57.152.33.198
🇳🇱 45.148.10.151
🇬🇧 31.171.130.70
🇺🇸 20.55.25.219
🇩🇪 51.89.72.9
🇨🇳 27.8.44.168
🇩🇪 217.181.85.119
🇮🇳 135.235.138.43
🇹🇭 101.109.128.10
feedback