JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 211.91.150.107

211.91.150.107 was found in our database!

This IP was reported 268 times. Confidence of Abuse is 16%: ?

16%

ISP	China United Telecommunications Corporation
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	cnuninet.com
Country	🇨🇳 China
City	Wuhan, Hubei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 211.91.150.107

Whois 211.91.150.107

IP Abuse Reports for 211.91.150.107:

This IP address has been reported a total of 268 times from 152 distinct sources. 211.91.150.107 was first reported on March 13th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:02:46 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 netup.at	2026-04-22 04:30:36 (1 month ago)	IP 211.91.150.107 banned by Fail2Ban for sshd on Pangolin-Server	Brute-Force SSH
🇳🇱 trivox.sh	2026-04-11 17:39:45 (1 month ago)	Apr 11 18:28:33 ipmi sshd[1935204]: Failed password for root from 211.91.150.107 port 39806 ssh2 Apr ... show more Apr 11 18:28:33 ipmi sshd[1935204]: Failed password for root from 211.91.150.107 port 39806 ssh2 Apr 11 18:28:36 ipmi sshd[1935204]: Connection closed by authenticating user root 211.91.150.107 port 39806 [preauth] Apr 11 18:28:42 ipmi sshd[1935417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.150.107 user=root Apr 11 18:28:44 ipmi sshd[1935417]: Failed password for root from 211.91.150.107 port 40704 ssh2 Apr 11 18:28:47 ipmi sshd[1935417]: Connection closed by authenticating user root 211.91.150.107 port 40704 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-04-11 11:44:06 (1 month ago)	2026-04-11T13:43:36.427803wordpress.actimar.fr sshd[14074]: refused connect from 211.91.150.107 (211 ... show more 2026-04-11T13:43:36.427803wordpress.actimar.fr sshd[14074]: refused connect from 211.91.150.107 (211.91.150.107) 2026-04-11T13:43:43.051368wordpress.actimar.fr sshd[14080]: refused connect from 211.91.150.107 (211.91.150.107) 2026-04-11T13:43:49.496208wordpress.actimar.fr sshd[14088]: refused connect from 211.91.150.107 (211.91.150.107) 2026-04-11T13:43:56.195033wordpress.actimar.fr sshd[14095]: refused connect from 211.91.150.107 (211.91.150.107) 2026-04-11T13:44:02.676765wordpress.actimar.fr sshd[14101]: refused connect from 211.91.150.107 (211.91.150.107) ... show less	Brute-Force
🇩🇪 remo	2026-04-11 11:11:23 (1 month ago)	Apr 11 13:11:09 dev0-dcde-rnet sshd[5668]: Failed password for root from 211.91.150.107 port 60254 s ... show more Apr 11 13:11:09 dev0-dcde-rnet sshd[5668]: Failed password for root from 211.91.150.107 port 60254 ssh2 Apr 11 13:11:15 dev0-dcde-rnet sshd[5670]: Failed password for root from 211.91.150.107 port 56254 ssh2 show less	Brute-Force SSH
Anonymous	2026-04-11 06:41:55 (1 month ago)	SSH brute force attempt. User: root, Pass: [REDACTED]	Brute-Force SSH
🇺🇸 SystemRescue	2026-04-11 05:00:29 (1 month ago)	2026-04-11T05:00:03.881460+00:00 reliablesite sshd[889496]: Failed password for root from 211.91.150 ... show more 2026-04-11T05:00:03.881460+00:00 reliablesite sshd[889496]: Failed password for root from 211.91.150.107 port 42652 ssh2 2026-04-11T05:00:11.169957+00:00 reliablesite sshd[892091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.150.107 user=root 2026-04-11T05:00:13.644100+00:00 reliablesite sshd[892091]: Failed password for root from 211.91.150.107 port 50468 ssh2 2026-04-11T05:00:26.285585+00:00 reliablesite sshd[893700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.150.107 user=root 2026-04-11T05:00:28.153472+00:00 reliablesite sshd[893700]: Failed password for root from 211.91.150.107 port 52408 ssh2 ... show less	Brute-Force
🇮🇳 qtland DX(R)	2026-04-11 02:42:01 (1 month ago)	2026-04-11T02:41:52.938062+00:00 as-south-bom1 sshd-session[94398]: Connection closed by authenticat ... show more 2026-04-11T02:41:52.938062+00:00 as-south-bom1 sshd-session[94398]: Connection closed by authenticating user root 211.91.150.107 port 36462 [preauth] 2026-04-11T02:41:56.590523+00:00 as-south-bom1 sshd-session[94400]: Connection closed by authenticating user root 211.91.150.107 port 36464 [preauth] 2026-04-11T02:42:00.807055+00:00 as-south-bom1 sshd-session[94402]: Connection closed by authenticating user root 211.91.150.107 port 36480 [preauth] ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-11 00:25:56 (1 month ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/211.91.150.107	Brute-Force
🇦🇹 urnilxfgbez	2026-04-10 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 ITSNF	2026-04-10 18:04:27 (2 months ago)	PBK Apr 10 20:04:03 websrv01 sshd[2199515]: Failed password for root from 211.91.150.107 port 35822 ... show more PBK Apr 10 20:04:03 websrv01 sshd[2199515]: Failed password for root from 211.91.150.107 port 35822 ssh2 Apr 10 20:04:08 websrv01 sshd[2199539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.150.107 user=root Apr 10 20:04:10 websrv01 sshd[2199539]: Failed password for root from 211.91.150.107 port 35834 ssh2 Apr 10 20:04:24 websrv01 sshd[2199542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.150.107 user=root Apr 10 20:04:26 websrv01 sshd[2199542]: Failed password for root from 211.91.150.107 port 32920 ssh2 show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-04-10 17:23:08 (2 months ago)	Apr 10 11:22:59 b146-69 sshd[737492]: Failed password for root from 211.91.150.107 port 53776 ssh2 A ... show more Apr 10 11:22:59 b146-69 sshd[737492]: Failed password for root from 211.91.150.107 port 53776 ssh2 Apr 10 11:23:05 b146-69 sshd[737494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.150.107 user=root Apr 10 11:23:07 b146-69 sshd[737494]: Failed password for root from 211.91.150.107 port 35950 ssh2 ... show less	Brute-Force SSH
🇸🇪 elco	2026-04-10 08:09:00 (2 months ago)	2026-04-10T10:08:49.806726+02:00 sat sshd[9491]: Invalid user user from 211.91.150.107 port 56804 20 ... show more 2026-04-10T10:08:49.806726+02:00 sat sshd[9491]: Invalid user user from 211.91.150.107 port 56804 2026-04-10T10:08:53.403635+02:00 sat sshd[9493]: Invalid user user from 211.91.150.107 port 59404 2026-04-10T10:08:59.985674+02:00 sat sshd[9495]: Invalid user user from 211.91.150.107 port 59412 ... show less	Brute-Force SSH
🇯🇵 sh97	2026-04-10 06:22:28 (2 months ago)	JP01-VM: SSH Brute Force from 211.91.150.107 at 2026-04-10 02:22:27 EDT	Brute-Force SSH
🇧🇬 MazenHost	2026-04-10 03:59:52 (2 months ago)	Apr 10 06:59:21 fastdl sshd[607138]: Failed password for root from 211.91.150.107 port 37358 ssh2 Ap ... show more Apr 10 06:59:21 fastdl sshd[607138]: Failed password for root from 211.91.150.107 port 37358 ssh2 Apr 10 06:59:26 fastdl sshd[607140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.150.107 user=root Apr 10 06:59:28 fastdl sshd[607140]: Failed password for root from 211.91.150.107 port 44010 ssh2 Apr 10 06:59:38 fastdl sshd[607142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.150.107 user=root Apr 10 06:59:40 fastdl sshd[607142]: Failed password for root from 211.91.150.107 port 42284 ssh2 Apr 10 06:59:49 fastdl sshd[607144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.91.150.107 user=root Apr 10 06:59:51 fastdl sshd[607144]: Failed password for root from 211.91.150.107 port 34346 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.242.169.56

🇧🇩 223.27.93.35

🇨🇳 220.197.78.54

🇰🇷 211.223.107.86

🇩🇪 209.38.236.225

🇨🇳 117.50.75.90

🇱🇹 77.90.185.88

🇰🇷 59.6.41.4

🇩🇪 54.37.74.179

🇨🇳 221.13.93.204

🇰🇷 183.107.147.131

🇩🇪 167.94.145.17

🇨🇳 110.87.158.40

🇧🇭 88.201.6.58

🇩🇪 46.101.173.8

🇺🇸 20.168.7.168

🇯🇵 8.216.16.176

🇹🇭 203.154.158.195

🇺🇸 13.83.107.144

🇧🇷 205.210.31.180