109.160.32.45
On the shared blocklist: servers in the shieldie network block it.
Ban ends: Nov 5, 2026, 7:01 PM UTC
- Why
- AI analyst: SSH-only brute force across three networks; subnet activity alone insufficient
- Attack types
sshd- First reported
- Sep 23, 2026, 9:08 PM UTC
- Last reported
- Nov 4, 2026, 10:50 PM UTC
- Network
- AS197170 TechTies Inc.
- Location
- Netherlands
Attacks by type
| Attack type | Incidents |
|---|---|
sshd | 5 |
Incidents by severity: Low 5
Incidents
sshdLowAI verdict: malicious1 hitNov 4, 2026, 10:50 PM UTCsame as 03c308ee: [addr] again tripped shieldie-guard's sshd jail with repeated SSH auth failures (4th ban, 3 prior in recidive window); persistent automated brute-force consistent with prior verdicts, no evidence of successful login, and a neighboring address [addr] shows similar behavior.
sshdLowAI verdict: malicious1 hitNov 4, 2026, 10:57 AM UTC109.160.32.45 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (3 earlier bans in recidive window) and received a 28800s ban; it matches the ongoing pattern from the same [addr]/24 range seen 2026-11-01 and 2026-11-03, which points to persistent automated brute-force rather than a targeted attack.
sshdLowAI verdict: malicious1 hitOct 17, 2026, 2:56 PM UTCsame as 2620462d: [addr] re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (1 earlier ban in the recidive window) and received a 7200s firewall ban; it matches a recurring pattern from the [addr]/24 range (past .128, .32, .35), indicating persistent opportunistic brute-forcing rather than a targeted attack.
sshdLowAI verdict: malicious1 hitOct 14, 2026, 1:50 PM UTC109.160.32.45 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (4 earlier bans in the recidive window) and got a 57600s ban; together with recent incidents from .166, .102 and .128 in the same [addr]/24, this looks like persistent untargeted brute-force from one subnet, already contained.
sshdLowAI verdict: malicious1 hitOct 11, 2026, 12:48 PM UTC109.160.32.45 re-tripped shieldie-guard's sshd jail with repeated SSH auth failures (3 earlier bans in the recidive window) and received a 28800s ban; it matches the ongoing [addr]/24 brute-force pattern seen in prior incidents, which looks like persistent opportunistic scanning rather than a targeted attack.
Timeline
- Nov 4, 2026, 10:50 PM UTCLast reported
- Nov 4, 2026, 10:50 PM UTC
sshdLow - Nov 4, 2026, 10:57 AM UTC
sshdLow - Oct 17, 2026, 2:56 PM UTC
sshdLow - Oct 14, 2026, 1:50 PM UTC
sshdLow - Oct 11, 2026, 12:48 PM UTC
sshdLow - Sep 23, 2026, 9:08 PM UTCFirst reported
Shown: attack type, severity, AI verdict and a short redacted summary as reported by shieldie servers. Server names, addresses, user names and log lines are never published.