This IP address has been reported a total of
45
times from
36 distinct
sources.
91.241.49.92 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Report 2472315 with IP 3519882 for SSH brute-force attack by source 3514540 via ssh-honeypot/0.2.1+h ...
show moreReport 2472315 with IP 3519882 for SSH brute-force attack by source 3514540 via ssh-honeypot/0.2.1+http
show less
2026-06-15T08:01:40.066459-04:00 clair-mc sshd-session[97381]: Invalid user pi from 91.241.49.92 por ...
show more2026-06-15T08:01:40.066459-04:00 clair-mc sshd-session[97381]: Invalid user pi from 91.241.49.92 port 56352
2026-06-15T08:01:50.070329-04:00 clair-mc sshd-session[97385]: Invalid user ubuntu from 91.241.49.92 port 45958
2026-06-15T08:02:10.068852-04:00 clair-mc sshd-session[97388]: Invalid user admin from 91.241.49.92 port 38478
...
show less
2026-06-15T04:56:15.618003+02:00 vmd177327 sshd[3812964]: Failed password for root from 91.241.49.92 ...
show more2026-06-15T04:56:15.618003+02:00 vmd177327 sshd[3812964]: Failed password for root from 91.241.49.92 port 41910 ssh2
2026-06-15T04:57:39.387670+02:00 vmd177327 sshd[3821034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.241.49.92 user=root
2026-06-15T04:57:40.880171+02:00 vmd177327 sshd[3821034]: Failed password for root from 91.241.49.92 port 44104 ssh2
...
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=91.241.49.92; proto=TCP; source_port=35696; target_port=5901; flags=SYN
show less
2026-06-13 13:17:16 ssh-honeypotd[8]: Did not receive identification string from 91.241.49.92:48364 ...
show more2026-06-13 13:17:16 ssh-honeypotd[8]: Did not receive identification string from 91.241.49.92:48364 (target: 172.18.0.3:22): Socket error: disconnected
2026-06-13 13:17:27 ssh-honeypotd[8]: Failed password for root from 91.241.49.92 port 55992 ssh2 (target: 172.18.0.3:22, password: 123)
2026-06-13 13:17:37 ssh-honeypotd[8]: Failed password for root from 91.241.49.92 port 32980 ssh2 (target: 172.18.0.3:22, password: 1234)
2026-06-13 13:17:38 ssh-honeypotd[8]: Failed password for root from 91.241.49.92 port 32996 ssh2 (target: 172.18.0.3:22, password: 12345)
2026-06-13 13:17:47 ssh-honeypotd[8]: Failed password for root from 91.241.49.92 port 47846 ssh2 (target: 172.18.0.3:22, password: 123456)
2026-06-13 13:17:57 ssh-honeypotd[8]: Failed password for root from 91.241.49.92 port 38520 ssh2 (target: 172.18.0.3:22, password: 12345678)
2026-06-13 13:17:57 ssh-honeypotd[8]: Failed password for root from 91.241.49.92 port 38518 ssh2 (target: 172.18.0.3:22, password: 1234567)
2026-06-13 13:18:
...
show less
Jun 13 10:38:34 whitehoodie sshd[440403]: Failed password for root from 91.241.49.92 port 44540 ssh2 ...
show moreJun 13 10:38:34 whitehoodie sshd[440403]: Failed password for root from 91.241.49.92 port 44540 ssh2
Jun 13 10:40:12 whitehoodie sshd[440466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.241.49.92 user=root
Jun 13 10:40:14 whitehoodie sshd[440466]: Failed password for root from 91.241.49.92 port 41870 ssh2
Jun 13 10:40:12 whitehoodie sshd[440466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.241.49.92 user=root
Jun 13 10:40:14 whitehoodie sshd[440466]: Failed password for root from 91.241.49.92 port 41870 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 45 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩