This IP address has been reported a total of
117
times from
92 distinct
sources.
91.187.148.42 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 13 05:30:49 setebos sshd[192427]: Failed password for root from 91.187.148.42 port 38256 ssh2
Ju ...
show moreJun 13 05:30:49 setebos sshd[192427]: Failed password for root from 91.187.148.42 port 38256 ssh2
Jun 13 05:43:25 setebos sshd[192583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.187.148.42 user=root
Jun 13 05:43:28 setebos sshd[192583]: Failed password for root from 91.187.148.42 port 46956 ssh2
Jun 13 05:45:18 setebos sshd[192597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.187.148.42 user=root
Jun 13 05:45:21 setebos sshd[192597]: Failed password for root from 91.187.148.42 port 33952 ssh2
...
show less
Jun 13 09:10:30 ice2 sshd[2140827]: Invalid user baltimore from 91.187.148.42 port 56498
Jun 13 09:1 ...
show moreJun 13 09:10:30 ice2 sshd[2140827]: Invalid user baltimore from 91.187.148.42 port 56498
Jun 13 09:12:24 ice2 sshd[2140835]: Invalid user beer from 91.187.148.42 port 56940
...
show less
(sshd) Failed SSH login from 91.187.148.42 (RS/Serbia/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 91.187.148.42 (RS/Serbia/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 13 03:32:04 15032 sshd[10016]: Invalid user prisma from 91.187.148.42 port 47618
Jun 13 03:32:06 15032 sshd[10016]: Failed password for invalid user prisma from 91.187.148.42 port 47618 ssh2
Jun 13 03:38:48 15032 sshd[14298]: Invalid user faxserver from 91.187.148.42 port 57870
Jun 13 03:38:49 15032 sshd[14298]: Failed password for invalid user faxserver from 91.187.148.42 port 57870 ssh2
Jun 13 03:40:44 15032 sshd[15598]: Invalid user sydney from 91.187.148.42 port 38130
show less
2026-06-13T08:38:03.513899+00:00 tank sshd[2485762]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-06-13T08:38:03.513899+00:00 tank sshd[2485762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.187.148.42
2026-06-13T08:38:05.436466+00:00 tank sshd[2485762]: Failed password for invalid user faxserver from 91.187.148.42 port 38024 ssh2
2026-06-13T08:39:58.836342+00:00 tank sshd[2485829]: Invalid user sydney from 91.187.148.42 port 45296
...
show less
Jun 13 08:32:02 ice2 sshd[2140672]: Invalid user prisma from 91.187.148.42 port 58308
Jun 13 08:38:4 ...
show moreJun 13 08:32:02 ice2 sshd[2140672]: Invalid user prisma from 91.187.148.42 port 58308
Jun 13 08:38:47 ice2 sshd[2140693]: Invalid user faxserver from 91.187.148.42 port 41508
...
show less
2026-06-13T09:52:56.139132+02:00 proxy-nl1 sshd[607424]: pam_unix(sshd:auth): authentication failure ...
show more2026-06-13T09:52:56.139132+02:00 proxy-nl1 sshd[607424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.187.148.42 user=root
2026-06-13T09:52:58.774890+02:00 proxy-nl1 sshd[607424]: Failed password for root from 91.187.148.42 port 45478 ssh2
2026-06-13T09:54:39.951649+02:00 proxy-nl1 sshd[607483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.187.148.42 user=root
2026-06-13T09:54:41.724703+02:00 proxy-nl1 sshd[607483]: Failed password for root from 91.187.148.42 port 50020 ssh2
2026-06-13T09:56:19.900061+02:00 proxy-nl1 sshd[607555]: Invalid user sharepoint from 91.187.148.42 port 54998
show less
Brute-Force
SSH
Anonymous
2026-06-13T07:26:50.214102+00:00 de-fra2-matrix1 sshd[3254764]: Invalid user mahima from 91.187.148. ...
show more2026-06-13T07:26:50.214102+00:00 de-fra2-matrix1 sshd[3254764]: Invalid user mahima from 91.187.148.42 port 40360
2026-06-13T07:36:18.928552+00:00 de-fra2-matrix1 sshd[3255112]: Invalid user me from 91.187.148.42 port 54166
2026-06-13T07:41:06.121455+00:00 de-fra2-matrix1 sshd[3255175]: Invalid user mika from 91.187.148.42 port 48942
...
show less
(sshd) Failed SSH login from 91.187.148.42 (RS/Serbia/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 91.187.148.42 (RS/Serbia/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 13 02:26:05 14379 sshd[17510]: Invalid user mahima from 91.187.148.42 port 49940
Jun 13 02:26:07 14379 sshd[17510]: Failed password for invalid user mahima from 91.187.148.42 port 49940 ssh2
Jun 13 02:36:14 14379 sshd[22802]: Invalid user me from 91.187.148.42 port 33144
Jun 13 02:36:16 14379 sshd[22802]: Failed password for invalid user me from 91.187.148.42 port 33144 ssh2
Jun 13 02:39:20 14379 sshd[24513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.187.148.42 user=root
show less
2026-06-13T09:31:48.110128+02:00 aligw01.aneirin.net sshd-session[15993]: Invalid user mahima from 9 ...
show more2026-06-13T09:31:48.110128+02:00 aligw01.aneirin.net sshd-session[15993]: Invalid user mahima from 91.187.148.42 port 53270
2026-06-13T09:31:50.945046+02:00 aligw01.aneirin.net sshd-session[15993]: Failed password for invalid user mahima from 91.187.148.42 port 53270 ssh2
2026-06-13T09:31:51.539065+02:00 aligw01.aneirin.net sshd-session[15993]: Disconnected from invalid user mahima 91.187.148.42 port 53270 [preauth]
...
show less
2026-06-13T09:01:25.659977+02:00 www sshd[2838707]: Invalid user odoo from 91.187.148.42 port 49516
...
show more2026-06-13T09:01:25.659977+02:00 www sshd[2838707]: Invalid user odoo from 91.187.148.42 port 49516
2026-06-13T09:01:25.666847+02:00 www sshd[2838707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.187.148.42
2026-06-13T09:01:27.625735+02:00 www sshd[2838707]: Failed password for invalid user odoo from 91.187.148.42 port 49516 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 117 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩