92.207.4.157
On the shared blocklist: servers in the shieldie network block it.
Ban ends: Nov 12, 2026, 4:03 PM UTC
- Attack types
sshd- First reported
- Sep 22, 2026, 11:07 PM UTC
- Last reported
- Nov 12, 2026, 12:03 AM UTC
- Network
- AS31655 Gamma Telecom Holdings Ltd
- Location
- United Kingdom
Attacks by type
| Attack type | Incidents |
|---|---|
sshd | 9 |
Incidents by severity: Critical 1, High 2, Low 6
Incidents
These incidents come from 3 different servers. Each describes only its own history with this address, so a first ban on one can be a repeat ban on another.
sshdServer 1HighAI verdict: malicious1 hitNov 12, 2026, 12:00 AM UTCsshdServer 2HighAI verdict: malicious1 hitNov 10, 2026, 7:10 PM UTCsshdServer 3CriticalAI verdict: malicious5 hitsNov 9, 2026, 12:24 AM UTCsshdServer 3LowAI verdict: malicious1 hitNov 2, 2026, 10:59 AM UTCPersistent but untargeted SSH brute-force from 92.207.4.157 (fifth ban in recidive window) tripped shieldie-guard's sshd jail, which applied an escalated 57600s firewall ban; consistent with prior verdicts.
sshdServer 3LowAI verdict: malicious1 hitNov 1, 2026, 6:55 PM UTCPersistent but untargeted SSH brute-force from 92.207.4.157 (fourth ban in recidive window) tripped shieldie-guard's sshd jail, which applied an escalated 28800s firewall ban; consistent with prior verdicts of automated noise.
sshdServer 3LowAI verdict: malicious1 hitOct 31, 2026, 6:28 PM UTCPersistent but untargeted SSH brute-force from 92.207.4.157 (third ban in recidive window) tripped shieldie-guard's sshd jail, which applied an escalated 14400s firewall ban; consistent with prior verdicts for this source.
sshdServer 3LowAI verdict: malicious1 hitOct 31, 2026, 12:08 AM UTCRepeat SSH brute-force from 92.207.4.157 (second ban in recidive window) tripped shieldie-guard's sshd jail, which applied a 7200s firewall ban; consistent with persistent untargeted scanning noise, not a targeted attack.
sshdServer 1LowAI verdict: malicious1 hitOct 29, 2026, 10:53 PM UTCRepeated SSH auth failures from 92.207.4.157 (0 prior bans in the recidive window) matched shieldie-guard's 'sshd' jail, which applied a deterministic 3600s firewall ban; consistent with opportunistic internet-wide brute-force noise, not a targeted attack.
sshdServer 2LowAI verdict: malicious1 hitOct 19, 2026, 8:34 PM UTCRepeated SSH auth failures from 92.207.4.157 tripped shieldie-guard's sshd jail (7200s firewall ban, 1 prior ban in recidive window, attempts refused); a repeat offender, but the pattern matches opportunistic brute-force noise rather than a targeted attack.
Timeline
- Nov 12, 2026, 12:03 AM UTCLast reported
- Nov 12, 2026, 12:00 AM UTC
sshdHigh - Nov 10, 2026, 7:10 PM UTC
sshdHigh - Nov 9, 2026, 12:24 AM UTC
sshdCritical - Nov 2, 2026, 10:59 AM UTC
sshdLow - Nov 1, 2026, 6:55 PM UTC
sshdLow - Oct 31, 2026, 6:28 PM UTC
sshdLow - Oct 31, 2026, 12:08 AM UTC
sshdLow - Oct 29, 2026, 10:53 PM UTC
sshdLow - Oct 19, 2026, 8:34 PM UTC
sshdLow - Sep 22, 2026, 11:07 PM UTCFirst reported
Shown: attack type, severity, AI verdict and a short redacted summary as reported by shieldie servers. Server names, addresses, user names and log lines are never published.