shieldie.ai

46.253.45.10

Reported

Reported, waiting for confirmation by more independent servers.

34
confidence (0-100)
2
independent servers
2
reporter networks
46
attempts
Why
AI analyst: SSH-only brute force across three networks, no subnet activity
Attack types
sshd
First reported
Sep 21, 2026, 9:13 AM UTC
Last reported
Nov 11, 2026, 7:42 PM UTC
Network
AS206076 Ingenieria y Suministros Profesionales, S.L.
Location
Spain

Attacks by type

Attack typeIncidents
sshd9

Incidents by severity: Critical 1, Low 8

Incidents

These incidents come from 3 different servers. Each describes only its own history with this address, so a first ban on one can be a repeat ban on another.

  • sshdServer 1CriticalAI verdict: malicious14 hitsNov 11, 2026, 7:40 PM UTC
  • sshdServer 1LowAI verdict: malicious1 hitNov 1, 2026, 6:53 PM UTC

    Persistent recidivist SSH credential guessing from 46.253.45.10 (6th ban, 5 earlier in recidive window, previously seen [path]) re-tripped shieldie-guard's sshd jail; automated persistence, not evidence of a targeted or successful compromise.

  • sshdServer 1LowAI verdict: malicious1 hitOct 31, 2026, 12:09 AM UTC

    Persistent recidivist SSH credential guessing from 46.253.45.10 (5th ban, 4 earlier in recidive window, previously seen [path]) re-tripped shieldie-guard's sshd jail, which applied a 57600s firewall ban; pattern is opportunistic brute-force, not evidence of a targeted attack or compromise.

  • sshdServer 1LowAI verdict: malicious1 hitOct 26, 2026, 10:44 PM UTC

    Persistent recidivist SSH credential guessing from 46.253.45.10 (4 earlier bans in recidive window, previously seen on 2026-10-19) re-tripped shieldie-guard's sshd jail, which applied a 57600s firewall ban; consistent with automated persistent scanning rather than evidence of a targeted compromise.

  • sshdServer 2LowAI verdict: malicious1 hitOct 24, 2026, 7:15 PM UTC

    Repeat offender 46.253.45.10 (1 prior ban in recidive window, also banned earlier today) again tripped shieldie-guard's sshd jail, which escalated to a 7200s firewall ban; persistent but consistent with automated SSH brute-force noise rather than a targeted attack.

  • sshdServer 2LowAI verdict: malicious1 hitOct 24, 2026, 1:36 AM UTC

    Repeated SSH auth failures from 46.253.45.10 tripped shieldie-guard's sshd jail, which applied a 3600s firewall ban; no earlier bans of this address in the recidive window, consistent with opportunistic brute-force noise rather than a targeted attack.

  • sshdServer 1LowAI verdict: malicious1 hitOct 19, 2026, 3:06 AM UTC

    Persistent recidivist SSH credential guessing from 46.253.45.10 (7th ban; 6 earlier in the recidive window) re-tripped shieldie-guard's sshd jail, which applied a 230400s firewall ban. This is opportunistic scanning, not a targeted attack, and it was contained automatically.

  • sshdServer 1LowAI verdict: malicious1 hitOct 12, 2026, 5:38 PM UTC

    Persistent recidivist SSH credential guessing from 46.253.45.10 (6th ban; 5 earlier in the recidive window) re-tripped shieldie-guard's sshd jail, which applied an escalated 115200s firewall ban; the pattern is consistent with opportunistic automated scanning, not a targeted attack, and no successful auth is evidenced.

  • sshdServer 3LowAI verdict: malicious1 hitOct 11, 2026, 10:38 AM UTC

    Repeated SSH auth failures from 46.253.45.10 (no prior bans in the recidive window) matched shieldie-guard's 'sshd' jail, which applied a 3600s firewall ban; the pattern is consistent with opportunistic internet-wide brute-force noise rather than a targeted attack.

Timeline

  1. Nov 11, 2026, 7:42 PM UTCLast reported
  2. Nov 11, 2026, 7:40 PM UTCsshd Critical
  3. Nov 1, 2026, 6:53 PM UTCsshd Low
  4. Oct 31, 2026, 12:09 AM UTCsshd Low
  5. Oct 26, 2026, 10:44 PM UTCsshd Low
  6. Oct 24, 2026, 7:15 PM UTCsshd Low
  7. Oct 24, 2026, 1:36 AM UTCsshd Low
  8. Oct 19, 2026, 3:06 AM UTCsshd Low
  9. Oct 12, 2026, 5:38 PM UTCsshd Low
  10. Oct 11, 2026, 10:38 AM UTCsshd Low
  11. Sep 21, 2026, 9:13 AM UTCFirst reported

Shown: attack type, severity, AI verdict and a short redacted summary as reported by shieldie servers. Server names, addresses, user names and log lines are never published.

New search