Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 45.91.54.249:
This IP address has been reported a total of
12
times from
12 distinct
sources.
45.91.54.249 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Poland
with 3
reports;
France
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
11
times;
SSH
11
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
2026-09-09T01:18:30.120394likely-lavender.ptr.network sshd[95107]: Invalid user admin2 from 45.91.54 ...
show more2026-09-09T01:18:30.120394likely-lavender.ptr.network sshd[95107]: Invalid user admin2 from 45.91.54.249 port 57844
2026-09-09T01:18:30.183601likely-lavender.ptr.network sshd[95107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.91.54.249
2026-09-09T01:18:32.492301likely-lavender.ptr.network sshd[95107]: Failed password for invalid user admin2 from 45.91.54.249 port 57844 ssh2
...
show less
Sep 9 01:55:52 plsk sshd[1417136]: Invalid user admin2 from 45.91.54.249 port 54382
Sep 9 01:55:52 ...
show moreSep 9 01:55:52 plsk sshd[1417136]: Invalid user admin2 from 45.91.54.249 port 54382
Sep 9 01:55:52 plsk sshd[1417136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.91.54.249
Sep 9 01:55:54 plsk sshd[1417136]: Failed password for invalid user admin2 from 45.91.54.249 port 54382 ssh2
Sep 9 01:56:02 plsk sshd[1417171]: Invalid user adminuser from 45.91.54.249 port 36534
...
show less
Automated report by DataDream Sentinel.
Repeated SSH authentication failures consistent with credent ...
show moreAutomated report by DataDream Sentinel.
Repeated SSH authentication failures consistent with credential brute-force activity were detected against infrastructure monitored by DataDream.
25 failed-authentication event references were correlated between 2026-09-08 23:20:22 and 23:31:24 UTC.
No successful SSH authentication was observed in the available telemetry.
Reference: DD-AIPDB-20260908-6A595B60
show less
2026-09-09T01:03:40.413517+02:00 nightland sshd-session[2388555]: pam_unix(sshd:auth): authenticatio ...
show more2026-09-09T01:03:40.413517+02:00 nightland sshd-session[2388555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.91.54.249
2026-09-09T01:03:42.641217+02:00 nightland sshd-session[2388555]: Failed password for invalid user admin2 from 45.91.54.249 port 35496 ssh2
2026-09-09T01:03:42.802011+02:00 nightland sshd-session[2388836]: Invalid user adminuser from 45.91.54.249 port 35502
show less
Sep 9 00:05:36 fw03 sshd[993023]: Invalid user admin2 from 45.91.54.249 port 34448
Sep 9 00:05:36 ...
show moreSep 9 00:05:36 fw03 sshd[993023]: Invalid user admin2 from 45.91.54.249 port 34448
Sep 9 00:05:36 fw03 sshd[993023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.91.54.249
Sep 9 00:05:38 fw03 sshd[993023]: Failed password for invalid user admin2 from 45.91.54.249 port 34448 ssh2
Sep 9 00:05:39 fw03 sshd[993027]: Invalid user adminuser from 45.91.54.249 port 59822
...
show less
Report 2669527 with IP 3717094 for SSH brute-force attack by source 3711752 via ssh-honeypot/0.2.0+h ...
show moreReport 2669527 with IP 3717094 for SSH brute-force attack by source 3711752 via ssh-honeypot/0.2.0+http
show less
Brute-Force
SSH
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
