This IP address has been reported a total of
44
times from
35 distinct
sources.
91.4.5.244 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 3 13:38:20 Lyra sshd[2531157]: Invalid user ubuntu from 91.4.5.244 port 46728
Jun 3 13:38:20 L ...
show moreJun 3 13:38:20 Lyra sshd[2531157]: Invalid user ubuntu from 91.4.5.244 port 46728
Jun 3 13:38:20 Lyra sshd[2531157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.4.5.244
Jun 3 13:38:22 Lyra sshd[2531157]: Failed password for invalid user ubuntu from 91.4.5.244 port 46728 ssh2
Jun 3 13:40:09 Lyra sshd[2531688]: Invalid user zhou from 91.4.5.244 port 57214
Jun 3 13:40:09 Lyra sshd[2531688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.4.5.244
Jun 3 13:40:11 Lyra sshd[2531688]: Failed password for invalid user zhou from 91.4.5.244 port 57214 ssh2
...
show less
2026-06-03T13:26:40.341489+02:00 mx01.crazycraftland.net sshd-session[168177]: User root from 91.4.5 ...
show more2026-06-03T13:26:40.341489+02:00 mx01.crazycraftland.net sshd-session[168177]: User root from 91.4.5.244 not allowed because not listed in AllowUsers
2026-06-03T13:30:58.232528+02:00 mx01.crazycraftland.net sshd-session[170829]: User root from 91.4.5.244 not allowed because not listed in AllowUsers
2026-06-03T13:32:54.932902+02:00 mx01.crazycraftland.net sshd-session[172151]: User root from 91.4.5.244 not allowed because not listed in AllowUsers
...
show less
OpenCanary honeypot hit on port 22 (no legitimate service runs there); logtype 4000. Automated repor ...
show moreOpenCanary honeypot hit on port 22 (no legitimate service runs there); logtype 4000. Automated report.
show less
2026-06-03T10:17:42.626228+00:00 s158416 sshd[184274]: Failed password for root from 91.4.5.244 port ...
show more2026-06-03T10:17:42.626228+00:00 s158416 sshd[184274]: Failed password for root from 91.4.5.244 port 58954 ssh2
2026-06-03T10:19:39.581367+00:00 s158416 sshd[184443]: Invalid user postgre from 91.4.5.244 port 41726
2026-06-03T10:19:39.588339+00:00 s158416 sshd[184443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.4.5.244
2026-06-03T10:19:41.901033+00:00 s158416 sshd[184443]: Failed password for invalid user postgre from 91.4.5.244 port 41726 ssh2
2026-06-03T10:21:40.407518+00:00 s158416 sshd[184557]: Invalid user prod from 91.4.5.244 port 52738
...
show less
Jun 3 10:13:00 sshd[751986]: Disconnected from authenticating user XXXX 91.4.5.244 port 58276 [preau ...
show moreJun 3 10:13:00 sshd[751986]: Disconnected from authenticating user XXXX 91.4.5.244 port 58276 [preauth]
Jun 3 10:16:49 sshd[752052]: Disconnected from authenticating user XXXX 91.4.5.244 port 50620 [preauth]
show less
SSH Brute force: 30 attempts were recorded from 91.4.5.244
2026-06-03T09:55:38+02:00 Disconnected fr ...
show moreSSH Brute force: 30 attempts were recorded from 91.4.5.244
2026-06-03T09:55:38+02:00 Disconnected from authenticating user root 91.4.5.244 port 35670 [preauth]
2026-06-03T09:58:39+02:00 Invalid user login from 91.4.5.244 port 55246
2026-06-03T10:00:53+02:00 Invalid user tempuser from 91.4.5.244 port 42128
2026-06-03T10:02:58+02:00 Invalid user takeshi from 91.4.5.244 port 57230
2026-06-03T10:04:58+02:00 Invalid user ftpuser from 91.4.5.244 port 44096
2026-06-03T10:07:01+02:00 Invalid user www from 91.4.5.244 port 59190
2026-06-03T10:09:10+02:00 Disconnected from authenticating user root 91.4.5.244 port 46062 [preauth]
2026-06-03T10:11:26+02:00 Invalid user bruno from 91.4.5.244 port 32950
2026-06-03T10:13:48+02:00 Invalid user sergio from 91.4.5.244 port 48062
2026-06-03T10:16:05+02:00 Invalid user ftp_test from 91.4.5.244 port 34942
2026-06-03T10:18:23+02:00 Invalid user perla from 91.4
show less
Brute-Force
SSH
Showing 16 to
30
of 44 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩