JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

111.91.22.119

Recent Activity

Abuse Confidence Score

100% Critical

39 reports

33 reporters · latest 2 days ago

ISP: Huawei-Cloud-SG
Usage Type: Data Center/Web Hosting/Transit
ASN: AS136907
Domain Name: huawei.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

39 from 33 distinct reporters

First reported

November 5th 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 13 🇫🇷 France 10 🇺🇸 United States of America 3

Most common categories Brute-Force 33 SSH 31 Port Scan 5 Hacking 1 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Kotiacat_one	2026-11-06 09:11:09 UTC · (2 days ago)	2026-11-06T12:11:06.732542+03:00 n36c308 sshd-session[477334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.22.119 user=root 2026-11-06T12:11:08.762443+03:00 n36c308 sshd-session[477334]: Failed pass ... show more 2026-11-06T12:11:06.732542+03:00 n36c308 sshd-session[477334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.22.119 user=root 2026-11-06T12:11:08.762443+03:00 n36c308 sshd-session[477334]: Failed password for root from 111.91.22.119 port 41628 ssh2 ... show less	Brute-Force SSH
🇫🇷 uthul	2026-11-06 07:22:08 UTC · (2 days ago)	T-Pot honeypot: 1 hits on ports [2222] (automated)	Port Scan
🇩🇪 NetEye	2026-11-06 05:44:11 UTC · (2 days ago)	SSH brute force login attempt	Brute-Force SSH
🇦🇹 reporter_anon	2026-11-06 04:01:44 UTC · (2 days ago)	Connection closed by authenticating user root 111.91.22.119 port 38614 [preauth]	Brute-Force SSH
Anonymous	2026-11-06 03:55:28 UTC · (2 days ago)	2026-11-06T06:55:20.495874+03:00 us-3 sshd-session[1345094]: Failed password for root from 111.91.22.119 port 42108 ssh2 2026-11-06T06:55:25.643337+03:00 us-3 sshd-session[1345105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more 2026-11-06T06:55:20.495874+03:00 us-3 sshd-session[1345094]: Failed password for root from 111.91.22.119 port 42108 ssh2 2026-11-06T06:55:25.643337+03:00 us-3 sshd-session[1345105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.22.119 user=root 2026-11-06T06:55:27.536052+03:00 us-3 sshd-session[1345105]: Failed password for root from 111.91.22.119 port 42120 ssh2 ... show less	Brute-Force SSH
🇬🇧 markawes	2026-11-06 03:46:02 UTC · (2 days ago)	Host [111.91.22.119] was blocked via [SSH].	Brute-Force SSH
🇹🇷 Threat.live	2026-11-06 03:45:02 UTC · (2 days ago)	Threat.live: Brute Force	Brute-Force
🇪🇸 guille-rodriguez	2026-11-06 01:35:12 UTC · (2 days ago)	SSH BruteForce detected by Fail2Ban (failures=8, source=VPSPSCZP)	Brute-Force SSH
🇧🇬 OHOST.BG	2026-11-06 00:58:12 UTC · (2 days ago)	Nov 6 02:57:44 gamehost sshd[32244]: Failed password for root from 111.91.22.119 port 53018 ssh2 Nov 6 02:58:02 gamehost sshd[32251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.22.119 user=root N ... show more Nov 6 02:57:44 gamehost sshd[32244]: Failed password for root from 111.91.22.119 port 53018 ssh2 Nov 6 02:58:02 gamehost sshd[32251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.22.119 user=root Nov 6 02:58:04 gamehost sshd[32251]: Failed password for root from 111.91.22.119 port 52454 ssh2 Nov 6 02:58:08 gamehost sshd[32253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.22.119 user=root Nov 6 02:58:10 gamehost sshd[32253]: Failed password for root from 111.91.22.119 port 57182 ssh2 ... show less	Brute-Force SSH
🇩🇪 marcel-knorr.de	2026-11-06 00:26:00 UTC · (2 days ago)	[fwbs-database] SSH login failed	Brute-Force SSH
🇺🇸 cazae	2026-11-06 00:20:56 UTC · (2 days ago)	2026-11-05T20:20:21.330535-04:00 debian sshd[319103]: Failed password for root from 111.91.22.119 port 56098 ssh2 2026-11-05T20:20:38.797828-04:00 debian sshd[319105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... show more 2026-11-05T20:20:21.330535-04:00 debian sshd[319103]: Failed password for root from 111.91.22.119 port 56098 ssh2 2026-11-05T20:20:38.797828-04:00 debian sshd[319105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.22.119 user=root 2026-11-05T20:20:40.949874-04:00 debian sshd[319105]: Failed password for root from 111.91.22.119 port 39674 ssh2 2026-11-05T20:20:52.527208-04:00 debian sshd[319107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.22.119 user=root 2026-11-05T20:20:54.934725-04:00 debian sshd[319107]: Failed password for root from 111.91.22.119 port 55788 ssh2 ... show less	Brute-Force SSH
🇩🇪 hostero	2026-11-06 00:16:27 UTC · (2 days ago)	2026-11-06T01:16:20.979622+01:00 s1149 sshd[3312118]: Failed password for root from 111.91.22.119 port 58800 ssh2 2026-11-06T01:16:24.622763+01:00 s1149 sshd[3312123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... show more 2026-11-06T01:16:20.979622+01:00 s1149 sshd[3312118]: Failed password for root from 111.91.22.119 port 58800 ssh2 2026-11-06T01:16:24.622763+01:00 s1149 sshd[3312123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.22.119 user=root 2026-11-06T01:16:26.563329+01:00 s1149 sshd[3312123]: Failed password for root from 111.91.22.119 port 58814 ssh2 ... show less	Brute-Force SSH
🇹🇷 oalver	2026-11-05 23:55:55 UTC · (2 days ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. Sources: honeypot. First seen: 2026-11-05. Risk score: 30/100.	Brute-Force SSH
🇫🇮 EndCore Group	2026-11-05 22:39:56 UTC · (2 days ago)	2026-11-05T22:39:34.9359491764559.xorek.cloud sshd[21442]: Failed password for root from 111.91.22.119 port 50540 ssh2 2026-11-05T22:39:52.8517041764559.xorek.cloud sshd[21444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s ... show more 2026-11-05T22:39:34.9359491764559.xorek.cloud sshd[21442]: Failed password for root from 111.91.22.119 port 50540 ssh2 2026-11-05T22:39:52.8517041764559.xorek.cloud sshd[21444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.91.22.119 user=root 2026-11-05T22:39:54.9898431764559.xorek.cloud sshd[21444]: Failed password for root from 111.91.22.119 port 43726 ssh2 ... show less	Brute-Force SSH
🇫🇷 uthul	2026-11-05 22:10:54 UTC · (2 days ago)	T-Pot honeypot: 13 hits on ports [22222] (automated)	Port Scan

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 188.240.59.8

🇺🇸 148.135.0.242

🇳🇱 77.239.124.176

🇵🇱 2400:cb00:1055:1000:d9b9:5ef0:aff0:209c

🇬🇧 188.240.59.59

🇬🇧 188.240.59.42

🇺🇸 162.216.150.103

🇺🇸 147.185.132.110

🇳🇱 109.160.32.177

🇨🇳 61.169.112.210

🇩🇪 195.63.23.246

🇬🇧 188.240.59.32

🇲🇽 187.188.8.224

🇺🇸 159.183.103.238

🇮🇹 151.18.27.243

🇻🇳 103.48.192.48

🇨🇳 58.242.118.12

🇺🇸 40.80.203.254

🇬🇧 35.203.211.176

🇬🇧 188.240.59.11