112.91.253.199
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China Unicom Guangdong province network
- Usage Type
- Fixed Line ISP
- ASN
- AS17816
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Guangzhou, Guangdong
Abuse Reports
Total reports
16 from
14 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 sc user |
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
|
Brute-Force SSH | |
| 🇧🇷 fcsz |
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
|
Brute-Force SSH | |
| 🇩🇪 thierolf.org (Abuse reporting) |
Fail2Ban: Mail-Server
|
Brute-Force SSH | |
| 🇩🇪 mnpx |
SSH brute force login attempt (74×) over 0h:19m; first seen here 2026-11-08T21:48Z
|
Brute-Force Exploited Host SSH | |
| 🇳🇱 Frank Henkes |
sshd [1970070]
Security/authorization messages [4]
Connection closed by invalid user yzb 112.91.253.199 port 53505 [preauth]
|
Web App Attack SSH | |
| 🇬🇧 sc user |
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
|
Brute-Force SSH | |
| 🇩🇪 odenwald.social (Abuse reporting) |
Fail2Ban: Mail-Server
|
Brute-Force SSH | |
| 🇩🇪 reznekcs |
F2B sshd ban. Logs: 2026-11-07T22:47:23.923765+01:00 isp sshd[2640600]: Connection closed by 112.91.253.199 port 25301 [preauth]
|
Brute-Force SSH | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.
|
Brute-Force | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| Anonymous |
|
Brute-Force SSH | |
| Anonymous |
|
Brute-Force SSH | |
| 🇫🇷 georgton.tech |
|
Brute-Force SSH | |
| Anonymous |
|
Brute-Force SSH | |
| 🇪🇸 saima |
Detected 1852 times. SSH Brute-Force from address 112.91.253.199
|
SSH Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown