This IP address has been reported a total of
74
times from
59 distinct
sources.
91.227.114.202 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-30T02:46:59.147873+00:00 instance-20241105-1951 sshd[1941938]: Connection closed by authenti ...
show more2026-05-30T02:46:59.147873+00:00 instance-20241105-1951 sshd[1941938]: Connection closed by authenticating user root 91.227.114.202 port 48862 [preauth]
...
show less
May 29 20:33:03 koppa sshd[330398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreMay 29 20:33:03 koppa sshd[330398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.227.114.202 user=root
May 29 20:33:06 koppa sshd[330398]: Failed password for invalid user root from 91.227.114.202 port 47662 ssh2
May 29 20:36:19 koppa sshd[330441]: User root from 91.227.114.202 not allowed because none of user's groups are listed in AllowGroups
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-30T02:04:44Z and 2026-05-3 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-30T02:04:44Z and 2026-05-30T02:32:03Z
show less
May 29 19:01:22 netllama sshd-session[1901536]: User root from 91.227.114.202 not allowed because no ...
show moreMay 29 19:01:22 netllama sshd-session[1901536]: User root from 91.227.114.202 not allowed because not listed in AllowUsers
May 29 19:04:13 netllama sshd-session[1901744]: User root from 91.227.114.202 not allowed because not listed in AllowUsers
...
show less
2026-05-30T01:46:13.485257+00:00 instance-20241105-1951 sshd[1941611]: Connection closed by authenti ...
show more2026-05-30T01:46:13.485257+00:00 instance-20241105-1951 sshd[1941611]: Connection closed by authenticating user root 91.227.114.202 port 42134 [preauth]
...
show less
2026-05-30T03:36:59.616909+02:00 dArtagnan sshd[3782146]: Failed password for root from 91.227.114.2 ...
show more2026-05-30T03:36:59.616909+02:00 dArtagnan sshd[3782146]: Failed password for root from 91.227.114.202 port 38078 ssh2
2026-05-30T03:39:49.852713+02:00 dArtagnan sshd[3783556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.227.114.202 user=root
2026-05-30T03:39:51.793981+02:00 dArtagnan sshd[3783556]: Failed password for root from 91.227.114.202 port 36718 ssh2
...
show less
2026-05-30T01:16:00.602816+00:00 my-vps sshd-session[32970]: User root from 91.227.114.202 not allow ...
show more2026-05-30T01:16:00.602816+00:00 my-vps sshd-session[32970]: User root from 91.227.114.202 not allowed because not listed in AllowUsers
2026-05-30T01:36:58.159466+00:00 my-vps sshd-session[32981]: User root from 91.227.114.202 not allowed because not listed in AllowUsers
...
show less
Honeypot [uk-production01]: Brute-force attack detected on 22/SSH
• Credential used: root:Password1
...
show moreHoneypot [uk-production01]: Brute-force attack detected on 22/SSH
• Credential used: root:Password1
• Number of login attempts: 1
• Client: SSH-2.0-Go
show less
SSH
Showing 16 to
30
of 74 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩