Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-08T09:16:59.681502+01:00 serengeti sshd-session[1033278]: Invalid user ubuntu from 91.126.95.174 port 9829
2026-11-08T09:16:59.682956+01:00 serengeti sshd-session[1033278]: Failed password for invalid user ubuntu from 91.126.95.174 port 9829 ...
show more2026-11-08T09:16:59.681502+01:00 serengeti sshd-session[1033278]: Invalid user ubuntu from 91.126.95.174 port 9829
2026-11-08T09:16:59.682956+01:00 serengeti sshd-session[1033278]: Failed password for invalid user ubuntu from 91.126.95.174 port 9829 ssh2
2026-11-08T09:19:37.626399+01:00 serengeti sshd-session[1033467]: Failed password for root from 91.126.95.174 port 54669 ssh2
2026-11-08T09:22:16.871576+01:00 serengeti sshd-session[1033962]: Failed password for root from 91.126.95.174 port 37275 ssh2
2026-11-08T09:24:49.751104+01:00 serengeti sshd-session[1034116]: Failed password for root from 91.126.95.174 port 20558 ssh2
...
show less
2026-11-08T08:55:48.530998+01:00 serengeti sshd-session[1030580]: Failed password for root from 91.126.95.174 port 17372 ssh2
2026-11-08T08:58:33.689998+01:00 serengeti sshd-session[1030952]: Failed password for root from 91.126.95.174 port 63058 ssh ...
show more2026-11-08T08:55:48.530998+01:00 serengeti sshd-session[1030580]: Failed password for root from 91.126.95.174 port 17372 ssh2
2026-11-08T08:58:33.689998+01:00 serengeti sshd-session[1030952]: Failed password for root from 91.126.95.174 port 63058 ssh2
2026-11-08T09:01:23.615070+01:00 serengeti sshd-session[1031441]: Failed password for root from 91.126.95.174 port 50532 ssh2
2026-11-08T09:04:04.407103+01:00 serengeti sshd-session[1031624]: Failed password for root from 91.126.95.174 port 39145 ssh2
2026-11-08T09:06:44.363486+01:00 serengeti sshd-session[1032062]: Failed password for root from 91.126.95.174 port 27759 ssh2
...
show less
2026-11-08T05:52:41.582029+01:00 web3 sshd-session[85776]: Failed password for invalid user lucy from 91.126.95.174 port 61830 ssh2
2026-11-08T06:31:51.975134+01:00 web3 sshd-session[86328]: Invalid user host1 from 91.126.95.174 port 52402
2026-11-08 ...
show more2026-11-08T05:52:41.582029+01:00 web3 sshd-session[85776]: Failed password for invalid user lucy from 91.126.95.174 port 61830 ssh2
2026-11-08T06:31:51.975134+01:00 web3 sshd-session[86328]: Invalid user host1 from 91.126.95.174 port 52402
2026-11-08T06:31:51.977638+01:00 web3 sshd-session[86328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.126.95.174
2026-11-08T06:31:54.205054+01:00 web3 sshd-session[86328]: Failed password for invalid user host1 from 91.126.95.174 port 52402 ssh2
show less
2026-11-08T04:11:03.437332+01:00 ns3243542 sshd[2436463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.126.95.174
2026-11-08T04:11:05.726648+01:00 ns3243542 sshd[2436463]: Failed password for invalid use ...
show more2026-11-08T04:11:03.437332+01:00 ns3243542 sshd[2436463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.126.95.174
2026-11-08T04:11:05.726648+01:00 ns3243542 sshd[2436463]: Failed password for invalid user proxyuser from 91.126.95.174 port 20234 ssh2
2026-11-08T04:13:48.338773+01:00 ns3243542 sshd[2436868]: Invalid user antonio from 91.126.95.174 port 8762
...
show less
Nov 8 00:13:34 ipmi sshd[581397]: Failed password for invalid user odoo from 91.126.95.174 port 55102 ssh2
Nov 8 00:13:35 ipmi sshd[581397]: Disconnected from invalid user odoo 91.126.95.174 port 55102 [preauth]
Nov 8 00:16:28 ipmi sshd[582182]: I ...
show moreNov 8 00:13:34 ipmi sshd[581397]: Failed password for invalid user odoo from 91.126.95.174 port 55102 ssh2
Nov 8 00:13:35 ipmi sshd[581397]: Disconnected from invalid user odoo 91.126.95.174 port 55102 [preauth]
Nov 8 00:16:28 ipmi sshd[582182]: Invalid user roman from 91.126.95.174 port 45559
Nov 8 00:16:28 ipmi sshd[582182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.126.95.174
Nov 8 00:16:30 ipmi sshd[582182]: Failed password for invalid user roman from 91.126.95.174 port 45559 ssh2
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown