This IP address has been reported a total of
45
times from
39 distinct
sources.
91.99.6.245 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
5 incidents: port scanning. First: 2026-06-12 17:26, Last: 2026-06-12 18:30 UTC. Triggers: non-publi ...
show more5 incidents: port scanning. First: 2026-06-12 17:26, Last: 2026-06-12 18:30 UTC. Triggers: non-public-port,port-trap,firewall-tcp,ufw-repeater,recidive.
show less
UFW BLOCK Report:
Total attempts: 18
Top ports and details:
- Port 22 (18x): SSH Brute-Force ( ...
show moreUFW BLOCK Report:
Total attempts: 18
Top ports and details:
- Port 22 (18x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 91.99.6.245
| this report is autogenerated by ZIME Cloud
show less
Jun 12 21:18:25 Sayrix2 sshd[367237]: Invalid user orangepi from 91.99.6.245 port 48966
Jun 12 21:18 ...
show moreJun 12 21:18:25 Sayrix2 sshd[367237]: Invalid user orangepi from 91.99.6.245 port 48966
Jun 12 21:18:25 Sayrix2 sshd[367237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.99.6.245
Jun 12 21:18:27 Sayrix2 sshd[367237]: Failed password for invalid user orangepi from 91.99.6.245 port 48966 ssh2
Jun 12 21:19:27 Sayrix2 sshd[367278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.99.6.245 user=root
Jun 12 21:19:29 Sayrix2 sshd[367278]: Failed password for root from 91.99.6.245 port 48576 ssh2
...
show less
2026-06-12T23:08:01.503917+02:00 lw-dedi-hdz-10g2480-ams sshd-session[2963287]: Invalid user admin f ...
show more2026-06-12T23:08:01.503917+02:00 lw-dedi-hdz-10g2480-ams sshd-session[2963287]: Invalid user admin from 91.99.6.245 port 36080
2026-06-12T23:08:53.991144+02:00 lw-dedi-hdz-10g2480-ams sshd-session[2963412]: Invalid user orangepi from 91.99.6.245 port 53548
2026-06-12T23:15:28.022340+02:00 lw-dedi-hdz-10g2480-ams sshd-session[2964143]: Invalid user test from 91.99.6.245 port 54472
...
show less
UFW BLOCK Report:
Total attempts: 38
Top ports and details:
- Port 22 (38x): SSH Brute-Force ( ...
show moreUFW BLOCK Report:
Total attempts: 38
Top ports and details:
- Port 22 (38x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 91.99.6.245
| this report is autogenerated by ZIME Cloud
show less
2026-06-12T20:52:50.467354+00:00 de-fra2-ddos1 sshd[978966]: Invalid user admin from 91.99.6.245 por ...
show more2026-06-12T20:52:50.467354+00:00 de-fra2-ddos1 sshd[978966]: Invalid user admin from 91.99.6.245 port 46544
2026-06-12T20:53:39.368571+00:00 de-fra2-ddos1 sshd[978970]: Invalid user orangepi from 91.99.6.245 port 53292
2026-06-12T20:59:22.743978+00:00 de-fra2-ddos1 sshd[979279]: Invalid user test from 91.99.6.245 port 40426
...
show less
2026-06-12T22:39:24.154214+02:00 coffeelake sshd[3408972]: Invalid user demo from 91.99.6.245 port 5 ...
show more2026-06-12T22:39:24.154214+02:00 coffeelake sshd[3408972]: Invalid user demo from 91.99.6.245 port 53172
2026-06-12T22:45:01.102260+02:00 coffeelake sshd[3420732]: Invalid user vpn from 91.99.6.245 port 51292
2026-06-12T22:46:30.246558+02:00 coffeelake sshd[3423921]: Invalid user deploy from 91.99.6.245 port 45250
2026-06-12T22:50:58.724600+02:00 coffeelake sshd[3433633]: Invalid user admin from 91.99.6.245 port 52290
2026-06-12T22:51:43.391600+02:00 coffeelake sshd[3435389]: Invalid user alan from 91.99.6.245 port 56322
...
show less
Jun 12 22:44:32 kronos sshd-session[1444071]: Invalid user admin from 91.99.6.245 port 48456
Jun 12 ...
show moreJun 12 22:44:32 kronos sshd-session[1444071]: Invalid user admin from 91.99.6.245 port 48456
Jun 12 22:45:15 kronos sshd-session[1444451]: Invalid user orangepi from 91.99.6.245 port 51132
Jun 12 22:45:59 kronos sshd-session[1444839]: User root from 91.99.6.245 not allowed because none of user's groups are listed in AllowGroups
...
show less
Report 2455997 with IP 3503564 for SSH brute-force attack by source 3498222 via ssh-honeypot/0.2.0+h ...
show moreReport 2455997 with IP 3503564 for SSH brute-force attack by source 3498222 via ssh-honeypot/0.2.0+http
show less
Brute-Force
SSH
Showing 1 to
15
of 45 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩