This IP address has been reported a total of
33
times from
30 distinct
sources.
91.73.224.131 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-04T02:40:03.166200+03:00 gogo-server sshd-session[1037335]: Failed password for root from 91 ...
show more2026-06-04T02:40:03.166200+03:00 gogo-server sshd-session[1037335]: Failed password for root from 91.73.224.131 port 36664 ssh2
2026-06-04T02:40:05.222767+03:00 gogo-server sshd-session[1037384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.73.224.131 user=root
2026-06-04T02:40:07.400095+03:00 gogo-server sshd-session[1037384]: Failed password for root from 91.73.224.131 port 36670 ssh2
...
show less
2026-06-03T19:21:23.545144+02:00 server sshd[3110674]: User root from 91.73.224.131 not allowed beca ...
show more2026-06-03T19:21:23.545144+02:00 server sshd[3110674]: User root from 91.73.224.131 not allowed because listed in DenyUsers
2026-06-03T19:21:24.368108+02:00 server sshd[3110676]: User root from 91.73.224.131 not allowed because listed in DenyUsers
2026-06-03T19:21:25.189605+02:00 server sshd[3110678]: User root from 91.73.224.131 not allowed because listed in DenyUsers
2026-06-03T19:21:25.999868+02:00 server sshd[3110680]: User root from 91.73.224.131 not allowed because listed in DenyUsers
2026-06-03T19:21:26.798721+02:00 server sshd[3110682]: User root from 91.73.224.131 not allowed because listed in DenyUsers
...
show less
2026-06-03T18:54:50.582154+02:00 eclipse sshd-session[2209814]: Connection closed by authenticating ...
show more2026-06-03T18:54:50.582154+02:00 eclipse sshd-session[2209814]: Connection closed by authenticating user root 91.73.224.131 port 60016 [preauth]
2026-06-03T18:54:51.291575+02:00 eclipse sshd-session[2209824]: Connection closed by authenticating user root 91.73.224.131 port 60032 [preauth]
2026-06-03T18:54:52.020911+02:00 eclipse sshd-session[2209836]: Connection closed by authenticating user root 91.73.224.131 port 60040 [preauth]
2026-06-03T18:54:52.732842+02:00 eclipse sshd-session[2209846]: Connection closed by authenticating user root 91.73.224.131 port 60046 [preauth]
2026-06-03T18:54:53.443153+02:00 eclipse sshd-session[2209848]: Connection closed by authenticating user root 91.73.224.131 port 60060 [preauth]
...
show less
2026-06-03T18:31:30.411446+02:00 eclipse sshd-session[2201425]: Connection closed by authenticating ...
show more2026-06-03T18:31:30.411446+02:00 eclipse sshd-session[2201425]: Connection closed by authenticating user root 91.73.224.131 port 40412 [preauth]
2026-06-03T18:31:31.138693+02:00 eclipse sshd-session[2201439]: Connection closed by authenticating user root 91.73.224.131 port 40414 [preauth]
2026-06-03T18:31:31.848483+02:00 eclipse sshd-session[2201453]: Connection closed by authenticating user root 91.73.224.131 port 40430 [preauth]
2026-06-03T18:31:32.570726+02:00 eclipse sshd-session[2201457]: Connection closed by authenticating user root 91.73.224.131 port 40440 [preauth]
2026-06-03T18:31:33.295828+02:00 eclipse sshd-session[2201459]: Connection closed by authenticating user root 91.73.224.131 port 40444 [preauth]
...
show less
Honeypot detection: SSH brute-force authentication attempt on port 22. Severity: MEDIUM. Aaran.cloud
SSH
Brute-Force
Anonymous
2026-06-03T05:06:18.090699+00:00 de-fra2-dns3 sshd[1389812]: Invalid user user from 91.73.224.131 po ...
show more2026-06-03T05:06:18.090699+00:00 de-fra2-dns3 sshd[1389812]: Invalid user user from 91.73.224.131 port 47680
2026-06-03T05:06:18.950529+00:00 de-fra2-dns3 sshd[1389814]: Invalid user user from 91.73.224.131 port 47688
2026-06-03T05:06:19.855841+00:00 de-fra2-dns3 sshd[1389816]: Invalid user user from 91.73.224.131 port 47700
...
show less
SSH brute-force attempt detected from IP 91.73.224.131: 2026-06-02T05:57:31.986943+00:00 [redacted-h ...
show moreSSH brute-force attempt detected from IP 91.73.224.131: 2026-06-02T05:57:31.986943+00:00 [redacted-hostname] sshd[382922]: Failed password for invalid user root from 91.73.224.131 port 59890 ssh2 on 1780379858.
show less
Port Scan
Brute-Force
SSH
Showing 1 to
15
of 33 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩