Extreme Threat
IP 179.32.33.161, registered in Colombia and operated by COLOMBIA TELECOMUNICACIONES S.A. ESP BIC, presents a maximum threat level of 10/10 based on 940 total abuse reports submitted through automated honeypot sensors over an eight-month period from October 2025 through May 2026. This address is definitively associated with persistent SSH brute-force activity, with recent violations clustering around 25 and 27 detected instances in sanitized honeypot logs. Despite a moderate activity frequency rating of 4/10, the sheer volume of reports and perfect threat score indicate a highly focused, systematic campaign against exposed SSH services.
The detection profile for 179.32.33.161 is exclusively centred on SSH brute-force attempts, accounting for all 20 of the most recent threat-category reports filed against this address. The 73% confidence score reflects that while the activity is unambiguously malicious, the attribution to a specific threat actor remains partially inferred. With four distinct reporting sources contributing to the total count, the aggregated abuse data spans a substantial timeframe, suggesting this IP has been consistently engaged in credential-guessing operations rather than opportunistic scanning bursts.
SSH brute-force attacks represent a direct pathway for unauthorized server access when defenders rely on password-based authentication. The attack pattern observed involves repeated login attempts against the SSH daemon, exploiting weak or default credentials to gain a foothold. Even failed attempts consume server resources and create security audit noise. The cumulative risk is severe: a single successful authentication grants interactive shell access, enabling lateral movement, data exfiltration or further infrastructure compromise.
Site operators should block 179.32.33.161 at the network perimeter and monitor for subsequent reassignment. Enforcing key-based SSH authentication, disabling root login and relocating the SSH service from its default port substantially raises the barrier for automated attacks. Deploying tools such as fail2ban to dynamically ban repeated offenders mitigates brute-force volume without manual intervention. Regular audit of authentication logs and enforcement of strong, unique passwords further reduce exposure to this class of threat.
UA 
GB 
CA 
VN