shieldie.ai

108.174.147.36

Banned

On the shared blocklist: servers in the shieldie network block it.

Ban ends: Nov 5, 2026, 9:55 PM UTC

41
confidence (0-100)
3
independent servers
3
reporter networks
25
attempts
Why
AI analyst: SSH-only brute force across three networks, no subnet activity
Attack types
sshd
First reported
Oct 9, 2026, 1:27 PM UTC
Last reported
Nov 4, 2026, 9:55 PM UTC
Network
AS31898 Oracle Corporation
Location
Brazil

Attacks by type

Attack typeIncidents
sshd3

Incidents by severity: Low 3

Incidents

  • sshdLowAI verdict: malicious1 hitNov 4, 2026, 9:51 PM UTC

    Third SSH brute-force ban for recidivist 108.174.147.36 (2 earlier bans in recidive window); shieldie-guard's sshd jail applied a 14400s firewall ban — persistent opportunistic credential scanning, likely same [addr]/23 source as prior incidents, not targeted.

  • sshdLowAI verdict: malicious1 hitOct 19, 2026, 6:14 PM UTC

    Repeat offender 108.174.147.36 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (1 prior ban in recidive window, previously banned 2026-10-16), now escalated to a 7200s ban; persistent but consistent with untargeted brute-force noise.

  • sshdLowAI verdict: malicious1 hitOct 16, 2026, 8:03 PM UTC

    Repeated SSH auth failures from 108.174.147.36 tripped shieldie-guard's sshd jail, which applied a deterministic 3600s firewall ban; this is the address's first ban (0 prior in the recidive window), so it looks like opportunistic scanning noise rather than a targeted attack, consistent with similar past incidents.

Timeline

  1. Nov 4, 2026, 9:55 PM UTCLast reported
  2. Nov 4, 2026, 9:51 PM UTCsshd Low
  3. Oct 19, 2026, 6:14 PM UTCsshd Low
  4. Oct 16, 2026, 8:03 PM UTCsshd Low
  5. Oct 9, 2026, 1:27 PM UTCFirst reported

Shown: attack type, severity, AI verdict and a short redacted summary as reported by shieldie servers. Server names, addresses, user names and log lines are never published.

New search