This IP address has been reported a total of
53
times from
40 distinct
sources.
91.201.55.116 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-16T13:42:38.319974+02:00 axisverse sshd-session[1342625]: Invalid user mgeweb from 91.201.55 ...
show more2026-06-16T13:42:38.319974+02:00 axisverse sshd-session[1342625]: Invalid user mgeweb from 91.201.55.116 port 32874
2026-06-16T13:46:51.836683+02:00 axisverse sshd-session[1356593]: Invalid user blog from 91.201.55.116 port 43420
2026-06-16T13:50:56.449795+02:00 axisverse sshd-session[1370978]: Invalid user tomcat7 from 91.201.55.116 port 56044
...
show less
(sshd) Failed SSH login from 91.201.55.116 (RU/Russia/vm-c768c145.na4u.ru): 5 in the last 3600 secs; ...
show more(sshd) Failed SSH login from 91.201.55.116 (RU/Russia/vm-c768c145.na4u.ru): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 16 06:32:35 21941 sshd[2450]: Invalid user mssql from 91.201.55.116 port 42340
Jun 16 06:32:37 21941 sshd[2450]: Failed password for invalid user mssql from 91.201.55.116 port 42340 ssh2
Jun 16 06:41:26 21941 sshd[6912]: Invalid user postgres from 91.201.55.116 port 42660
Jun 16 06:41:28 21941 sshd[6912]: Failed password for invalid user postgres from 91.201.55.116 port 42660 ssh2
Jun 16 06:43:32 21941 sshd[7915]: Invalid user mgeweb from 91.201.55.116 port 54216
show less
Jun 16 10:32:16 Japan sshd[3898175]: Invalid user ca from 91.201.55.116 port 43362
Jun 16 10:33:47 J ...
show moreJun 16 10:32:16 Japan sshd[3898175]: Invalid user ca from 91.201.55.116 port 43362
Jun 16 10:33:47 Japan sshd[3898281]: Invalid user oliver from 91.201.55.116 port 50058
Jun 16 10:35:18 Japan sshd[3898400]: Invalid user mysql from 91.201.55.116 port 38448
...
show less
2026-06-16T12:25:05.426562+02:00 gw9.nodesafety.com sshd-session[3199781]: Disconnected from authent ...
show more2026-06-16T12:25:05.426562+02:00 gw9.nodesafety.com sshd-session[3199781]: Disconnected from authenticating user root 91.201.55.116 port 54078 [preauth]
2026-06-16T12:32:39.808665+02:00 gw9.nodesafety.com sshd-session[3201029]: Invalid user ca from 91.201.55.116 port 56826
2026-06-16T12:32:39.906561+02:00 gw9.nodesafety.com sshd-session[3201029]: Disconnected from invalid user ca 91.201.55.116 port 56826 [preauth]
2026-06-16T12:34:12.551817+02:00 gw9.nodesafety.com sshd-session[3201269]: Invalid user oliver from 91.201.55.116 port 44314
2026-06-16T12:34:12.937878+02:00 gw9.nodesafety.com sshd-session[3201269]: Disconnected from invalid user oliver 91.201.55.116 port 44314 [preauth]
show less
2026-06-16T03:32:27.542087-07:00 goldcrest sshd[143006]: Invalid user ca from 91.201.55.116 port 471 ...
show more2026-06-16T03:32:27.542087-07:00 goldcrest sshd[143006]: Invalid user ca from 91.201.55.116 port 47154
2026-06-16T03:32:27.545121-07:00 goldcrest sshd[143006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.201.55.116
2026-06-16T03:32:29.420267-07:00 goldcrest sshd[143006]: Failed password for invalid user ca from 91.201.55.116 port 47154 ssh2
2026-06-16T03:33:58.852007-07:00 goldcrest sshd[143013]: Invalid user oliver from 91.201.55.116 port 59742
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Jun 16 02:50:24 server01 sshd[22504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 16 02:50:24 server01 sshd[22504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.201.55.116
Jun 16 02:50:26 server01 sshd[22504]: Failed password for invalid user admin from 91.201.55.116 port 43964 ssh2
Jun 16 02:52:27 server01 sshd[22575]: Failed password for root from 91.201.55.116 port 37874 ssh2
...
show less
Jun 16 02:17:11 server01 sshd[20271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 16 02:17:11 server01 sshd[20271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.201.55.116
Jun 16 02:17:14 server01 sshd[20271]: Failed password for invalid user cwa from 91.201.55.116 port 46252 ssh2
Jun 16 02:26:59 server01 sshd[20844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.201.55.116
...
show less
Brute-Force
SSH
Anonymous
2026-06-16T08:11:59.107575+00:00 de-fra2-ntp1 sshd[1662791]: Invalid user mbp from 91.201.55.116 por ...
show more2026-06-16T08:11:59.107575+00:00 de-fra2-ntp1 sshd[1662791]: Invalid user mbp from 91.201.55.116 port 39302
2026-06-16T08:15:19.856118+00:00 de-fra2-ntp1 sshd[1662827]: Invalid user debian from 91.201.55.116 port 55902
2026-06-16T08:18:18.967785+00:00 de-fra2-ntp1 sshd[1662853]: Invalid user jy from 91.201.55.116 port 58306
...
show less
2026-06-16T10:11:56.690973+02:00 axisverse sshd-session[588770]: Invalid user mbp from 91.201.55.116 ...
show more2026-06-16T10:11:56.690973+02:00 axisverse sshd-session[588770]: Invalid user mbp from 91.201.55.116 port 42786
2026-06-16T10:15:17.801137+02:00 axisverse sshd-session[600426]: Invalid user debian from 91.201.55.116 port 47110
2026-06-16T10:18:16.715999+02:00 axisverse sshd-session[610854]: Invalid user jy from 91.201.55.116 port 50290
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-16T08:00:08Z and 2026-06-1 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-16T08:00:08Z and 2026-06-16T08:01:12Z
show less
Brute-Force
SSH
Showing 1 to
15
of 53 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩