Maximum Danger
IP 193.32.162.35 is a high-risk address originating from Romania, operated by Unmanaged Ltd under ASN AS47890, with a threat level of 10/10 and a confidence score of 98% based on 973 abuse reports from 20 independent automated honeypot sensors over approximately three months of sustained activity between April and June 2026.
The overwhelming majority of detected threat activity centers on SSH brute-force attacks, with 13 recent reports specifically categorizing SSH intrusion attempts alongside 12 reports of general hacking activity and one confirmed instance of the host being used as an exploited platform. Suricata sensors detected both active SSH brute-force authentication attempts and established SSH sessions on expected ports, with additional stream-level anomalies indicating packet timestamp irregularities characteristic of automated attack toolkits. The activity frequency rating of 8/10 confirms this is not isolated probing but persistent, high-volume intrusion infrastructure.
SSH brute-force attacks represent a concrete, severe threat to any exposed remote-access service, as attackers systematically cycle through credential combinations to gain unauthorized server access. Combined with evidence of a compromised or deliberately weaponized host, this IP poses a dual risk: it may be controlled by threat actors conducting systematic credential stuffing campaigns against SSH services worldwide, or it may be a hijacked system silently participating in a botnet without its owner's awareness. Either scenario makes this address dangerous to permit in server access logs or firewall rules.
Site operators should immediately block 193.32.162.35 at the firewall level and implement fail2ban or equivalent intrusion prevention rules to automatically ban repeated SSH authentication failures. SSH services should be hardened by disabling root login, switching from password to key-based authentication, and moving SSH from the default port. Continuous monitoring of authentication logs and deployment of intrusion detection systems will help identify any remaining attempted connections from this source.
BG 
JP 
BE 
AR 
KR 
AU