This IP address has been reported a total of
392
times from
288 distinct
sources.
91.40.152.60 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 95
reports;
United States of America
with 72
reports;
France
with 36
reports.
The most common categories in these recent reports were:
SSH
360
times;
Brute-Force
360
times;
Port Scan
17
times;
Hacking
11
times;
Web App Attack
8
times;
Other
14
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 13/100 (info ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 13/100 (info) | Phase: reconnaissance (low-volume probing)
Failed auth: 4 (4 bad password, 0 invalid user) | 0 success | 12 total SSH log events | seen on 1 sensor(s)
Origin: Germany (DE) | AS3320 Deutsche Telekom AG | 91.40.152.0/24
First seen: 2026-10-26 11:47:00 UTC | Last seen: 2026-10-26 12:09:42 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
TSEC Honeypot Network report. Threat score: 96/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ...
show moreTSEC Honeypot Network report. Threat score: 96/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH, IoT Targeted. Honeypot: beelzebub. Context: Attacker IP 91.40.152.60 observed using SSH client fingerprint 'Unknown SSH Client (03a80b21afa8)' 3 times when connecting to a healthcare sector honeypot between 2026-10-26 09:59 and 2026-10-26 09....
show less
DDoS Attack
Port Scan
Hacking
Brute-Force
Web App Attack
SSH
IoT Targeted
2026-10-26T05:12:20.888994-06:00 eggbeater sshd[43143]: pam_unix(sshd:auth): authentication failure; ...
show more2026-10-26T05:12:20.888994-06:00 eggbeater sshd[43143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.40.152.60 user=root
2026-10-26T05:12:22.690403-06:00 eggbeater sshd[43143]: Failed password for invalid user root from 91.40.152.60 port 61708 ssh2
2026-10-26T05:21:15.455069-06:00 eggbeater sshd[43206]: User root from 91.40.152.60 not allowed because none of user's groups are listed in AllowGroups
...
show less
Oct 26 11:49:13 routing0301 sshd[2452388]: Failed password for root from 91.40.152.60 port 63716 ssh ...
show moreOct 26 11:49:13 routing0301 sshd[2452388]: Failed password for root from 91.40.152.60 port 63716 ssh2
Oct 26 11:53:25 routing0301 sshd[2453083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.40.152.60 user=root
Oct 26 11:53:27 routing0301 sshd[2453083]: Failed password for root from 91.40.152.60 port 59331 ssh2
...
show less
Unauthorized access attempt: SSH brute-force probe. Automated TCP connection attempts to SSH port (T ...
show moreUnauthorized access attempt: SSH brute-force probe. Automated TCP connection attempts to SSH port (TCP/22); dropped and blocked by firewall. Target: TCP/22 (SSH). First seen: 2026-10-26 10:27:20 UTC. Source: host firewall/sshd log.
show less
2026-10-26T10:09:35.284200+00:00 instance-20260917-1717 sshd-session[52929]: Invalid user esuser fro ...
show more2026-10-26T10:09:35.284200+00:00 instance-20260917-1717 sshd-session[52929]: Invalid user esuser from 91.40.152.60 port 59889
...
show less
2026-10-26T05:29:57.604349-04:00 sputnik3 sshd[3700560]: Invalid user vpnadmin from 91.40.152.60 por ...
show more2026-10-26T05:29:57.604349-04:00 sputnik3 sshd[3700560]: Invalid user vpnadmin from 91.40.152.60 port 63264
2026-10-26T05:33:58.935959-04:00 sputnik3 sshd[3702255]: Invalid user angel from 91.40.152.60 port 59890
2026-10-26T05:38:36.268290-04:00 sputnik3 sshd[3702881]: Invalid user ubuntu from 91.40.152.60 port 62689
...
show less
2026-10-26T10:11:32.567373+01:00 swsrv sshd[1912311]: User root from 91.40.152.60 not allowed becaus ...
show more2026-10-26T10:11:32.567373+01:00 swsrv sshd[1912311]: User root from 91.40.152.60 not allowed because not listed in AllowUsers
2026-10-26T10:27:32.571992+01:00 swsrv sshd[1948967]: User root from 91.40.152.60 not allowed because not listed in AllowUsers
2026-10-26T10:30:51.334361+01:00 swsrv sshd[1953396]: User root from 91.40.152.60 not allowed because not listed in AllowUsers
2026-10-26T10:35:03.152778+01:00 swsrv sshd[1961252]: User root from 91.40.152.60 not allowed because not listed in AllowUsers
...
show less
