This IP address has been reported a total of
1,285
times from
587 distinct
sources.
181.48.91.126 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
This IP address carried out 4 port scanning attempts on 01-06-2026. For more information or to repor ...
show moreThis IP address carried out 4 port scanning attempts on 01-06-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 1 SSH credential attack (attempts) on 01-06-2026. For more information o ...
show moreThis IP address carried out 1 SSH credential attack (attempts) on 01-06-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Jun 1 17:55:29 ipmi sshd[530486]: Failed password for invalid user saeed from 181.48.91.126 port 46 ...
show moreJun 1 17:55:29 ipmi sshd[530486]: Failed password for invalid user saeed from 181.48.91.126 port 46978 ssh2
Jun 1 17:55:30 ipmi sshd[530486]: Disconnected from invalid user saeed 181.48.91.126 port 46978 [preauth]
Jun 1 18:00:56 ipmi sshd[531576]: Invalid user test001 from 181.48.91.126 port 41344
Jun 1 18:00:56 ipmi sshd[531576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.91.126
Jun 1 18:00:57 ipmi sshd[531576]: Failed password for invalid user test001 from 181.48.91.126 port 41344 ssh2
...
show less
2026-06-01T18:23:17.912686+02:00 gw-de01-01.guestgw.net sshd[980574]: Invalid user erfan from 181.48 ...
show more2026-06-01T18:23:17.912686+02:00 gw-de01-01.guestgw.net sshd[980574]: Invalid user erfan from 181.48.91.126 port 33538
2026-06-01T18:23:18.104027+02:00 gw-de01-01.guestgw.net sshd[980574]: Disconnected from invalid user erfan 181.48.91.126 port 33538 [preauth]
2026-06-01T18:27:17.840285+02:00 gw-de01-01.guestgw.net sshd[981772]: Disconnected from authenticating user root 181.48.91.126 port 47452 [preauth]
2026-06-01T18:28:52.688512+02:00 gw-de01-01.guestgw.net sshd[982242]: Invalid user user from 181.48.91.126 port 49052
2026-06-01T18:28:53.000590+02:00 gw-de01-01.guestgw.net sshd[982242]: Disconnected from invalid user user 181.48.91.126 port 49052 [preauth]
show less
Brute-Force
Anonymous
SSH login attempts with user erfan
Brute-Force
Anonymous
Jun 1 16:18:45 f2b auth.info sshd[3625]: Invalid user erfan from 181.48.91.126 port 34442
Jun 1 16 ...
show moreJun 1 16:18:45 f2b auth.info sshd[3625]: Invalid user erfan from 181.48.91.126 port 34442
Jun 1 16:18:45 f2b auth.info sshd[3625]: Failed password for invalid user erfan from 181.48.91.126 port 34442 ssh2
Jun 1 16:18:45 f2b auth.info sshd[3625]: Disconnected from invalid user erfan 181.48.91.126 port 34442 [preauth]
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: alin, Pass: [REDACTED]
2026-06-01T17:52:38.666866+02:00 misaka-vm-s3n-2c4g-ber sshd-session[1745200]: Invalid user sig from ...
show more2026-06-01T17:52:38.666866+02:00 misaka-vm-s3n-2c4g-ber sshd-session[1745200]: Invalid user sig from 181.48.91.126 port 40782
2026-06-01T17:54:16.996488+02:00 misaka-vm-s3n-2c4g-ber sshd-session[1745219]: Invalid user hyper from 181.48.91.126 port 42830
2026-06-01T17:58:51.390855+02:00 misaka-vm-s3n-2c4g-ber sshd-session[1745333]: Invalid user tempuser from 181.48.91.126 port 48942
...
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 181.48.91.126 (CO/Colombia/-): 5 in the last 3600 secs; Ports: *; Direc ...
show more(sshd) Failed SSH login from 181.48.91.126 (CO/Colombia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 1 17:48:53 server02 sshd[3641825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.91.126 user=root
Jun 1 17:48:55 server02 sshd[3641825]: Failed password for root from 181.48.91.126 port 40716 ssh2
Jun 1 17:53:21 server02 sshd[3642049]: Invalid user sig from 181.48.91.126 port 57494
Jun 1 17:53:23 server02 sshd[3642049]: Failed password for invalid user sig from 181.48.91.126 port 57494 ssh2
Jun 1 17:54:59 server02 sshd[3642116]: Invalid user hyper from 181.48.91.126 port 59544
show less
181.48.91.126 (CO/Colombia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ...
show more181.48.91.126 (CO/Colombia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 1 10:41:26 17919 sshd[24857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.91.126 user=root
Jun 1 10:41:28 17919 sshd[24857]: Failed password for root from 181.48.91.126 port 48498 ssh2
Jun 1 10:39:52 17919 sshd[23946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.57.59.220 user=root
Jun 1 10:39:54 17919 sshd[23946]: Failed password for root from 34.57.59.220 port 42400 ssh2
Jun 1 10:42:18 17919 sshd[25318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.195.21.168 user=root
IP Addresses Blocked:
show less
2026-06-01T12:38:29.636401-03:00 us-mfl-01 sshd[1819921]: Invalid user simone from 181.48.91.126 por ...
show more2026-06-01T12:38:29.636401-03:00 us-mfl-01 sshd[1819921]: Invalid user simone from 181.48.91.126 port 38276
...
show less