Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-07T07:41:34.592262-07:00 b146-28 sshd[161353]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.32.45.72 user=user3
2026-11-07T07:41:36.420827-07:00 b146-28 sshd[161353]: Failed password for invalid u ...
show more2026-11-07T07:41:34.592262-07:00 b146-28 sshd[161353]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.32.45.72 user=user3
2026-11-07T07:41:36.420827-07:00 b146-28 sshd[161353]: Failed password for invalid user user3 from 191.32.45.72 port 25049 ssh2
2026-11-07T08:22:50.742879-07:00 b146-28 sshd[163285]: User root from 191.32.45.72 not allowed because none of user's groups are listed in AllowGroups
...
show less
[SSH Attack] SSH-related attack. Ports: *; Direction: 1; Trigger: LF_TRIGGER; Message: (sshd) Failed SSH login from 191.32.45.72 (191.32.45.72.static.adsl.gvt.net.br): 3 in the last 7200 secs; Logs: Nov 7 10:18:59 potedemel sshd[3096586]: Invalid us ...
show more[SSH Attack] SSH-related attack. Ports: *; Direction: 1; Trigger: LF_TRIGGER; Message: (sshd) Failed SSH login from 191.32.45.72 (191.32.45.72.static.adsl.gvt.net.br): 3 in the last 7200 secs; Logs: Nov 7 10:18:59 potedemel sshd[3096586]: Invalid user deploy from 191.32.45.72 port 61965
Nov 7 10:19:01 potedemel sshd[3096586]: Failed password for invalid user deploy from 191.32.45.72 port 61965 ssh2
Nov 7 10:33:42 potedemel sshd[3096768]: Invalid user ca from 191.32.45.72 port 32452
show less
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 1, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (eu1) over 2026-11-07..2026-11-07. Reported by an SSH honeypot network; no production service ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 1, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (eu1) over 2026-11-07..2026-11-07. Reported by an SSH honeypot network; no production service involved.
show less
(sshd) Failed SSH login from 191.32.45.72 (BR/Brazil/191.32.45.72.static.adsl.gvt.net.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 7 23:04:51 ded01 sshd[45985]: Invalid user ubuntu from 191.32.45.72 port 4347 ...
show more(sshd) Failed SSH login from 191.32.45.72 (BR/Brazil/191.32.45.72.static.adsl.gvt.net.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 7 23:04:51 ded01 sshd[45985]: Invalid user ubuntu from 191.32.45.72 port 43475
Nov 7 23:04:54 ded01 sshd[45985]: Failed password for invalid user ubuntu from 191.32.45.72 port 43475 ssh2
Nov 7 23:08:45 ded01 sshd[762]: Invalid user user1 from 191.32.45.72 port 43487
Nov 7 23:08:46 ded01 sshd[762]: Failed password for invalid user user1 from 191.32.45.72 port 43487 ssh2
Nov 7 23:12:41 ded01 sshd[4544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.32.45.72 user=root
show less
Port Scan
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
