This IP address has been reported a total of
519
times from
120 distinct
sources.
91.98.80.4 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-05-10T08:05:00Z and 2026-05-1 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-05-10T08:05:00Z and 2026-05-10T08:05:01Z
show less
2026-05-10T16:46:31.543355+09:00 no1 sshd[879359]: Disconnected from authenticating user root 91.98. ...
show more2026-05-10T16:46:31.543355+09:00 no1 sshd[879359]: Disconnected from authenticating user root 91.98.80.4 port 57092 [preauth]
...
show less
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-05-10T05:17:48Z and 2026-05- ...
show moreCowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-05-10T05:17:48Z and 2026-05-10T07:17:39Z
show less
May 10 02:14:11 ca-east-bhs-01 sshd[623479]: error: maximum authentication attempts exceeded for roo ...
show moreMay 10 02:14:11 ca-east-bhs-01 sshd[623479]: error: maximum authentication attempts exceeded for root from 91.98.80.4 port 50846 ssh2 [preauth]
...
show less
[fail2ban Auto Report] 2026-05-09T19:54:07.197837-05:00 alpha sshd-session[3521586]: error: maximum ...
show more[fail2ban Auto Report] 2026-05-09T19:54:07.197837-05:00 alpha sshd-session[3521586]: error: maximum authentication attempts exceeded for root from 91.98.80.4 port 44370 ssh2 [preauth]
...
show less
May 10 02:15:04 ***** sshd[43943]: User root from 91.98.80.4 not allowed because not listed in Allow ...
show moreMay 10 02:15:04 ***** sshd[43943]: User root from 91.98.80.4 not allowed because not listed in AllowUsers
show less
2026-05-10T07:04:51.158500+09:00 no6 sshd[177901]: Disconnected from authenticating user root 91.98. ...
show more2026-05-10T07:04:51.158500+09:00 no6 sshd[177901]: Disconnected from authenticating user root 91.98.80.4 port 50762 [preauth]
...
show less
Brute-Force
SSH
Anonymous
May 9 21:51:09 sonne sshd[3319179]: Failed publickey for root from 91.98.80.4 port 40702 ssh2: RSA ...
show moreMay 9 21:51:09 sonne sshd[3319179]: Failed publickey for root from 91.98.80.4 port 40702 ssh2: RSA SHA256:TmaJ8KPSCzbCbunLyDNU8BEvs8T4ljJ/wSEPOVZdfTQ
May 9 21:51:09 sonne sshd[3319179]: Failed publickey for root from 91.98.80.4 port 40702 ssh2: RSA SHA256:v2Mq0nnJmxu0sPfTNfYTtoMNB4vtyEYHHWGxwoIQIeA
May 9 21:51:09 sonne sshd[3319179]: Failed publickey for root from 91.98.80.4 port 40702 ssh2: RSA SHA256:+CutbZVZyxcQaA8NHMMWlYTeB6Pt0Lj+oeRM2CjAsHc
May 9 21:51:09 sonne sshd[3319179]: error: maximum authentication attempts exceeded for root from 91.98.80.4 port 40702 ssh2 [preauth]
May 9 21:53:51 sonne sshd[3323189]: Connection from 91.98.80.4 port 53748 on 85.215.122.93 port 22 rdomain ""
May 9 21:53:52 sonne sshd[3323189]: Failed none for root from 91.98.80.4 port 53748 ssh2
May 9 21:53:52 sonne sshd[3323189]: Failed publickey for root from 91.98.80.4 port 53748 ssh2: RSA SHA256:TmaJ8KPSCzbCbunLyDNU8BEvs8T4ljJ/wSEPOVZdfTQ
May 9 21:53:52 sonne sshd[3323189]: Failed publickey for r
...
show less
Brute-Force
SSH
Showing 436 to
450
of 519 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩