Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated honeypot observation: unauthorised SSH access with command execution. Failed logins: 9078, successful: 7, commands: 7, file transfers: 0. Seen on 3 sensor(s) (ap1, eu1, us1) over 2026-10-02..2026-11-12. Reported by an SSH honeypot network; ...
show moreAutomated honeypot observation: unauthorised SSH access with command execution. Failed logins: 9078, successful: 7, commands: 7, file transfers: 0. Seen on 3 sensor(s) (ap1, eu1, us1) over 2026-10-02..2026-11-12. Reported by an SSH honeypot network; no production service involved.
show less
Level: (HIGH): Ssh Abuse via Cowrie IOC Country: Bulgaria 470x -> Target Country: Germany SSH
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 109.160.32.102 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 12 14:15:10 server5 sshd[10257]: Invalid user from 109.160.32.102
Nov 12 14:16:05 server5 sshd[10337]: pam_ ...
show more(sshd) Failed SSH login from 109.160.32.102 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 12 14:15:10 server5 sshd[10257]: Invalid user from 109.160.32.102
Nov 12 14:16:05 server5 sshd[10337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.160.32.102 user=root
Nov 12 14:16:08 server5 sshd[10337]: Failed password for root from 109.160.32.102 port 59542 ssh2
Nov 12 14:16:09 server5 sshd[10343]: Invalid user kali from 109.160.32.102
Nov 12 14:16:09 server5 sshd[10343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.160.32.102
show less
