JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 191.37.76.16

191.37.76.16

Recent Activity

108 reports found in our database

21% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

CNT Fiber

Usage Type

Fixed Line ISP

ASN

AS263356

Hostname(s)

191-37-76-16.cntfiber.net.br

Domain Name

cntfiber.com.br

Country

🇧🇷 Brazil

City

Nova Lima, Minas Gerais

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 191.37.76.16:

This IP address has been reported a total of 108 times from 64 distinct sources. 191.37.76.16 was first reported on August 7th 2024, and the most recent report was 5 days ago. In the last 60 days, the top reporter locations were: India with 2 reports; United States of America with 2 reports; Brazil with 1 report. The most common categories in these recent reports were: Bad Web Bot 3 times; Hacking 3 times; DDoS Attack 2 times; SSH 2 times; Brute-Force 2 times; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-25 10:14:19 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇳🇱 DrLex0	2026-08-17 09:28:44 (1 week ago)	BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ... show more BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives 191.37.76.16 443 - [17/Aug/2026:09:28:44 +0000] "GET [redacted] HTTP/1.1" 503 6199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" show less	Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-07-25 00:16:37 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇧🇷 ICS Labs	2026-07-24 19:14:35 (1 month ago)	ICS Labs identified 191.37.76.16 as a malicious indicator from threat intelligence.	Hacking
🇮🇳 evicky2002	2026-07-03 07:05:16 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇮🇳 evicky2002	2026-07-02 04:51:18 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇦🇺 MAGIC	2026-06-15 00:31:17 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇧🇷 ICS Labs	2026-05-16 19:16:37 (3 months ago)	ICS Labs identified 191.37.76.16 as a malicious indicator from threat intelligence.	Hacking
🇫🇷 gooko	2026-05-11 13:44:36 (3 months ago)	SSH brute-force attack detected by fail2ban jail 'sshd'	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-29 00:01:32 (4 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/191.37.76.16	SSH
🇫🇷 SpaceHost-Server	2026-04-28 22:37:01 (4 months ago)		Brute-Force Web App Attack
🇺🇸 bigscoots.com	2026-04-28 15:47:16 (4 months ago)	191.37.76.16 (BR/Brazil/191-37-76-16.cntfiber.net.br), 5 distributed sshd attacks on account [root] ... show more 191.37.76.16 (BR/Brazil/191-37-76-16.cntfiber.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 28 10:43:49 14487 sshd[29006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.37.76.16 user=root Apr 28 10:43:51 14487 sshd[29006]: Failed password for root from 191.37.76.16 port 52323 ssh2 Apr 28 10:27:34 14487 sshd[27709]: Failed password for root from 191.37.76.16 port 52316 ssh2 Apr 28 10:46:57 14487 sshd[29251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.103.222.120 user=root Apr 28 10:27:32 14487 sshd[27709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.37.76.16 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-28 14:18:16 (4 months ago)	191.37.76.16 (BR/Brazil/191-37-76-16.cntfiber.net.br), 5 distributed sshd attacks on account [root] ... show more 191.37.76.16 (BR/Brazil/191-37-76-16.cntfiber.net.br), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 28 09:17:54 14175 sshd[20402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.156.33.182 user=root Apr 28 09:05:33 14175 sshd[19238]: Failed password for root from 191.37.76.16 port 52401 ssh2 Apr 28 09:05:30 14175 sshd[19238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.37.76.16 user=root Apr 28 09:16:02 14175 sshd[20294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.37.76.16 user=root Apr 28 09:16:05 14175 sshd[20294]: Failed password for root from 191.37.76.16 port 44072 ssh2 IP Addresses Blocked: 212.156.33.182 (TR/Turkey/212.156.33.182.static.turktelekom.com.tr) show less	Brute-Force SSH
🇫🇷 Richie	2026-04-28 13:40:34 (4 months ago)	Apr 28 15:35:47 host2 sshd[2246917]: Failed password for root from 191.37.76.16 port 44143 ssh2 Apr ... show more Apr 28 15:35:47 host2 sshd[2246917]: Failed password for root from 191.37.76.16 port 44143 ssh2 Apr 28 15:40:31 host2 sshd[2247296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.37.76.16 user=root Apr 28 15:40:33 host2 sshd[2247296]: Failed password for root from 191.37.76.16 port 45796 ssh2 Apr 28 15:40:31 host2 sshd[2247296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.37.76.16 user=root Apr 28 15:40:33 host2 sshd[2247296]: Failed password for root from 191.37.76.16 port 45796 ssh2 ... show less	Brute-Force SSH
🇫🇷 Richie	2026-04-28 13:16:49 (4 months ago)	Apr 28 15:00:57 host2 sshd[2245024]: Failed password for root from 191.37.76.16 port 3526 ssh2 Apr 2 ... show more Apr 28 15:00:57 host2 sshd[2245024]: Failed password for root from 191.37.76.16 port 3526 ssh2 Apr 28 15:05:32 host2 sshd[2245262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.37.76.16 user=root Apr 28 15:05:34 host2 sshd[2245262]: Failed password for root from 191.37.76.16 port 54842 ssh2 Apr 28 15:16:46 host2 sshd[2245851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.37.76.16 user=root Apr 28 15:16:47 host2 sshd[2245851]: Failed password for root from 191.37.76.16 port 4541 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.138

🇫🇷 85.217.140.20

🇪🇸 79.113.3.153

🇺🇸 34.186.23.49

🇮🇹 34.154.62.228

🇧🇬 5.188.206.34

🇺🇸 207.183.132.87

🇺🇸 192.196.186.250

🇬🇧 167.71.132.111

🇭🇰 156.236.66.15

🇮🇱 147.236.180.201

🇺🇸 136.67.17.121

🇵🇭 130.105.244.67

🇳🇱 103.246.147.64

🇫🇷 93.8.230.227

🇬🇧 45.133.173.170

🇺🇸 20.163.12.0

250.42.91.199

🇺🇸 208.64.36.240

🇧🇷 177.47.208.227